
In an era where supply chain vulnerabilities and data breaches pose significant risks to businesses, Flexport has established comprehensive protocols to safeguard sensitive commercial information throughout the shipping process. The logistics platform emphasizes data protection as a core component of its freight management services.
Data Collection and Management Framework
As a licensed Non-Vessel Operating Common Carrier (NVOCC) and customs brokerage, Flexport collects essential shipping documentation including:
- Bills of lading, commercial invoices, and packing lists
- Cargo specifications (weight, dimensions, quantities)
- Product identifiers (SKUs, HS codes, regulatory classifications)
- Security metadata (login credentials, location data)
Infrastructure and Storage Protocols
The company utilizes Amazon Web Services (AWS) for secure data housing, employing:
- Amazon S3 for document storage with 99.999999999% durability
- Amazon RDS for structured database management
Multi-layered backup systems include real-time replication across four geographically dispersed data centers and hourly server snapshots.
Access Control and Authentication
Flexport maintains strict access hierarchies:
- Role-based permissions limit data visibility to essential personnel
- Mandatory 90-day password rotations with complexity requirements
- Multi-factor authentication protocols for all internal systems
Encryption and Security Testing
The platform implements SSL encryption for all data transmissions and participates in continuous security validation through:
- Independent audits by NCC Group cybersecurity specialists
- HackerOne's bug bounty program for vulnerability detection
Data Governance Policies
Flexport's operational framework includes:
- Explicit prohibition of commercial data exploitation
- Client ownership rights over all submitted information
- Optional permanent deletion upon request (subject to regulatory requirements)
The company reports no historical security breaches affecting client data. Contingency plans address potential business continuity scenarios, including ownership transitions.