Everything bundled. Nothing nickel-and-dimed.
Fraud doesn't respect feature flags. Every module — custody, tracking, incidents, detection, forensics and recovery — is included on every tier. You scale with usage, not features.
Chain of custody
Three-party sign-off
Sender declares, receiver confirms, an independent witness co-signs — never a single party. Each handover becomes a signed, verifiable record.
ECDSA P-256 signatures
Every party signs with their own key, on their own device. The final receipt is cryptographically attributable.
GPS + geofence check
The receiver confirms with their location, checked against where the delivery was expected — so a confirmation from the wrong place stands out.
Photo evidence
Photos are SHA-256-hashed at capture and bound into the receipt — swapping the image breaks verification.
Internal transfers
Move goods between your own places — a warehouse to a project or construction site — received and witnessed by your own staff, with no external customer. Same signed custody trail.
Customer tracking
The customer gets a private live-tracking link by email, and your team can share it in one tap over WhatsApp.
Live tracking & route audit
Vehicle map
See each vehicle’s most recent reported position on a map — while the driver’s app is running with location on.
Expected vs actual route
The road route a trip should take, compared against where it actually went. Sustained off-route excursions are flagged as detours.
Unusual-stop detection
A truck stopped too long at a spot that isn’t a delivery site is flagged — with tolerance scaled to the journey, and cleared when the driver logs a reason (meal, roadblock, breakdown).
Geofenced check-in / out
Arrivals and departures at a site are logged from the GPS the app sends — a hands-free record of when the driver reached the site.
GPS-spoof flag
On Android, a fix that comes from a fake-GPS app is flagged, so a faked location doesn’t pass unnoticed.
Incident management
Field incident reports
Drivers report a robbery, breakdown, accident, theft or delay from their phone — with GPS, severity and photo evidence — and operations is alerted.
Two-way case timeline
Each incident is a case: operations assigns it, posts updates the driver sees on their phone, and resolves it; the driver acknowledges to close the loop.
Append-only & tamper-evident
The report and every update are written to the audit ledger — nothing can be quietly edited or deleted.
Pattern detection
Hotspots, repeat reporters and a by-type breakdown surface where trouble clusters across the fleet.
Operations wallboard
Live control-room view
Trucks reporting in, active deliveries, open incidents, route deviations, unusual stops and value in transit — on one auto-refreshing board.
Built for the wall
One tap to fill a depot TV or projector, fullscreen.
Live alerts
Route deviations, unusual stops and high-severity anomalies surface shortly after they’re detected.
Tamper resistance
Hash-chained ledger
Every event is hashed together with the previous one in an append-only ledger. Any later edit breaks the chain.
Merkle anchoring + trusted timestamps
Batches are anchored with a Merkle root and an RFC-3161 trusted timestamp, so the record’s existence and time are independently verifiable.
Public receipt verification
Anyone can verify a receipt against the ledger; a recompute flags a record that no longer matches.
Recovery & insurance
Auto-filed claims
A dispute, or a quantity variance over your threshold, raises a claim automatically with the evidence attached.
Photo-backed claims
Field disputes attach photo evidence; the images are stored and bound to the claim for the adjuster.
Adjuster workflow
Assign → investigate → approve or deny → record the settlement. Every transition is on the ledger.
Configurable payout
Set your payout ratio on approved claims. Payouts are recorded and exported for settlement today; automated disbursement is on the roadmap.
Detection
Anomaly engine
Rule- and score-based detection across several fraud patterns, with thresholds you tune per organisation.
Auto-ban on critical score
A high-enough risk score can automatically revoke an actor; banned actors are blocked at login and on every operation.
Digital twin
A parallel projection of expected metrics — anomalies are where reality diverges from the baseline.
Off-system counterparty mode
Honest reality coverage
Most platforms assume both sides are on the system. We don’t — wholesalers, market vendors, individuals and cooperatives are first-class counterparties.
Required photo at pickup
Goods, counterparty and paper receipt in one shot, SHA-256-anchored into the digital receipt — a photo swap breaks verification.
Receipt-number cross-check
The operator keys the paper receipt number, bound to the photo hash so auditors can confirm the digits match.
Device-captured GPS
Real coordinates at the actual pickup spot — not a warehouse default — anchoring where it really happened.
Accountable attester
Whoever is signed in signs on the counterparty’s behalf with their own key, so every off-system handover carries at least one attributable signature, plus an on-system witness.
Forensic disclosure
Every off-system handover is tagged in the ledger and shown with an OFF-SYSTEM badge — the full evidence path stays visible to auditors.
Forensics & reports
Actor profile
Timeline, hot locations, co-actor links and history for any party — in one view.
Evidence bundles
One-click export, HMAC-signed and hash-anchored — as PDF, Word or JSON.
Custody certificates
Every confirmed handover downloads as a branded PDF/Word certificate with the photo, an expected-vs-actual route map, and a verification QR.
Customer tracking portal
A public, unguessable tracking link shows the customer safe delivery status — no login, and no internal data exposed.
Field app
Native Android app
A dedicated driver app — pair once with a code, then receive work, confirm deliveries, report incidents and log stops.
Offline-first
Confirmations, incidents and stops are saved on the phone with no signal and sync automatically when the connection returns.
Nothing dropped
A sign-off that can’t send is retried and surfaced, never silently lost — a banner shows anything still waiting.
On-device signing
The driver’s signing key lives on their phone, so their confirmation is genuinely theirs.
AI assistance
Conversational investigator
Ask questions about your own organisation’s data in plain language; the assistant runs the investigation for you.
Your choice of engine
Works in a free rule-based mode, or connect an Anthropic key for natural-language synthesis.
Self-audited
Every assistant query is written to the ledger — the watchers are watched.