Security at NetModal

Your data security is our highest priority. We use multiple layers of protection to keep your business information safe.

End-to-End Encryption

All messages sent through NetExpress are protected with AES-256-GCM end-to-end encryption. Only the intended sender and recipient can read message contents. Not even NetModal can access your encrypted communications.

Data Encryption at Rest

All sensitive data stored in our databases is encrypted using AES-256 encryption. Database backups are also encrypted and stored in geographically separate locations for disaster recovery.

Transport Layer Security

All data in transit between your browser and our servers is protected with TLS 1.3, the latest encryption protocol. We enforce HSTS (HTTP Strict Transport Security) to prevent downgrade attacks.

Decentralized Identity (DID)

NetModal uses a decentralized identity system where your credentials are not stored in a single database. Your DID is cryptographically secured and portable, eliminating traditional single-point-of-failure authentication risks.

Access Control

Hierarchical Bitmap Permissions

Our permission engine uses a hierarchical bitmap system with two layers: company-level codes and individual user credentials. This enables granular, cell-level access control where every field in the system can have distinct read and write permissions.

Portal-Based Views

The same underlying data is viewed through role-specific portals (dispatcher, accountant, driver, warehouse, executive). Each portal surfaces only the information relevant to that role, enforced server-side.

Cell-Path Access Control

Permissions are defined at the field level using dot-notation paths (e.g., load.*.billing.*). This means a dispatcher can see load details but not financial data, while an accountant sees billing information but not driver personal details.

Multi-Signature Wallets

Business wallets support multi-signature authorization, requiring multiple approved signers for financial transactions. This prevents unauthorized transfers and provides an additional layer of financial security.

Infrastructure Security

SOC 2 Type II Compliant

Our infrastructure and processes meet SOC 2 Type II requirements for security, availability, and confidentiality. We undergo annual third-party audits to maintain certification.

Automated Threat Detection

Continuous monitoring with automated threat detection identifies and responds to suspicious activity in real time. Our security team investigates all alerts within minutes.

DDoS Protection

Enterprise-grade DDoS mitigation protects our services from volumetric and application-layer attacks, ensuring your operations remain uninterrupted.

Regular Penetration Testing

We conduct quarterly penetration tests performed by independent security firms. Identified vulnerabilities are remediated according to severity-based SLAs.

Blockchain Audit Trail

Every significant action on the NetModal platform is recorded on an immutable blockchain ledger. This provides a tamper-proof record of all data access, modifications, and transactions that can be independently verified.

Immutable Records

Once recorded, audit trail entries cannot be altered or deleted, providing a permanent, trustworthy record.

Verifiable Timestamps

Every action is cryptographically timestamped, providing indisputable proof of when events occurred.

Complete Chain of Custody

Track every status change, document upload, and financial transaction from creation to completion.

Responsible Disclosure

We value the security research community. If you discover a security vulnerability in our Services, please report it responsibly to security@netmodal.com. We commit to:

  • Acknowledging receipt within 24 hours
  • Providing an initial assessment within 72 hours
  • Keeping you informed of remediation progress
  • Not pursuing legal action against good-faith security researchers