What is in place today
CargoGen does not hold SOC 2, ISO 27001 or any other security certification yet. If your company needs one, talk to us and we will take your team through how the system is set up.
Your data is kept separate
Every record in CargoGen belongs to one company account, and every request is checked against the account of the person making it. You can also limit staff to a single branch, while admins see all branches.
Files are stored encrypted
Uploaded and generated files, such as KYC documents, invoices, vendor bills and bills of lading, are stored in the cloud with encryption turned on. Download links expire after one hour.
AI usage and safety
Settings shows how much AI your company has used and how much is left this period. Text from uploaded documents and emails is kept apart from CargoGen's own instructions to the AI, so a document can't tell the AI to do something else.
Roles and permissions
Roles control who can see and change finance, reports, settings and client KYC, in one branch or across the company. The built-in roles are Admin, Office Ops, Dock Ops and Staff, and the AI assistant is for admins.
Activity is recorded
Tally syncs, generated documents and BL versions are recorded with the time, and the team can add notes to a job's activity, so you can trace what happened.
Passwords and keys stay out of the code
API keys and database details are set on the server when we deploy, not stored in our source code. Mail server passwords you enter in Settings are stored encrypted.
Outside services we use
These are the services CargoGen connects to, and what data goes to each of them.
CargoGen connects to the Tally HTTP server you enable on your machine. It sends invoices and customer ledgers to Tally and reads payment receipts back. Every sync is logged so you can check what was sent and what came back.
Live AIS data supplies vessel positions. CargoGen only asks for the vessels it wants to follow. No shipment or customer data is sent.
CargoGen is hosted in the cloud. All files are stored with encryption turned on, and download links expire after one hour.
Sends emails from CargoGen, such as invoices and customer updates. You can use your own company mail server, or CargoGen sends them for you.
Document reading and the assistant run on our customized AI models. Only the text needed to read the document or answer the question is used.
Need more detail?
CargoGen is a young product. We don't have SOC 2, ISO 27001 or GDPR certification yet. If your IT or compliance team wants to look closer, we can share a system diagram and a list of the services we use, and go through it with them on a call.
