Security at Cargizon
Cargizon ingests financial documents, so we take data protection seriously. Here is exactly how your shipment, vendor, and invoice data is stored and protected, stated plainly.
How we protect your data
Cargizon combines a managed, encrypted database with application-level controls built for multi-tenant supply chain data.
Managed PostgreSQL on Supabase
Your data lives in a managed PostgreSQL database on Supabase. Supabase handles provisioning, security patching, and automatic daily backups.
Row-level security
Every table is protected by PostgreSQL row-level security. Queries are filtered by organization at the database level, so data that belongs to one customer cannot be read by another, even if the application code had a bug.
Encrypted in transit and at rest
All traffic between your browser, the app, and the database uses TLS (HTTPS). Stored data is encrypted at rest by Supabase.
Payments handled by Stripe
Cargizon never sees or stores your card details. All billing runs through Stripe, a PCI DSS Level 1 payment provider.
Enforcing content security policy
The site sends an enforcing Content-Security-Policy, so the browser only loads scripts and connects to hosts on an explicit allowlist. HTTP is redirected to HTTPS everywhere.
Role-based access
Permissions are checked on the server for every request, not just hidden in the interface.
Read-only vendor links
Share a purchase order with a vendor without giving them an account. You control what each link shows, and it stays read-only.
Isolated secrets and keys
API keys and secrets are scoped per environment and kept out of the codebase, so they can be rotated independently.
Where we stand
Cargizon does not hold its own SOC 2 certification, ISO certification, or an independent penetration test yet. We are a growing product and we would rather be clear about that than imply otherwise.
We build on providers that are independently audited. Our database and authentication run on Supabase, the application is deployed on Vercel, and payments run through Stripe. On our side, we follow security basics in the code itself: row-level security on every table, server-side permission checks, parameterized queries, input validation, and secrets kept out of the codebase.
Questions or a vendor review?
If you need details for a vendor security assessment, email support@cargizon.com and we will walk you through our setup.
Security FAQ
Ready to get started?
Start managing your shipments and checking your invoices on a platform built to protect your data.