Security & Isolation
Built for buyers who ask hard questions.
A 55-year-old port operations manager should be able to trust this with the fleet's data. Here's exactly how tenant isolation and order integrity work — no hand-waving.
Per-supplier tenant separation
Every supplier operates in an isolated tenant. Access is scoped through the fleet_suppliers model — a fleet only ever sees the supplier(s) it's explicitly linked to, and no supplier can read another's fleets, pricing, or orders.
Price integrity on submit
Prices are validated against the live catalog at the moment an order is submitted. A stale cart or a mid-session price change can't slip an incorrect line item through — the order reflects real catalog pricing.
Duplicate-order protection
Submits are idempotent. When a satellite or Wi-Fi link drops and the captain retries, the platform recognizes the repeat and won't create a duplicate order. Built for the connection you actually have at sea.
Invite-based access
There's no open sign-up into a supplier's tenant. Fleets, captains, and crew join through invite codes issued by the supplier — access is deliberate and revocable.
The model
One platform, many sealed tenants
Fleets link to suppliers through an explicit association. Nothing crosses a tenant boundary without one.
Tenant · Gulf Marine
Sealed — no visibility into other tenants.
Tenant · Harbor Stores NY/NJ
Sealed — no visibility into other tenants.
Tenant · Pacific Workboat
Sealed — no visibility into other tenants.
Want the technical walk-through?
We'll walk your team through tenant isolation, access control, and order integrity in a demo.
Request a demo