Security
Technical and organisational measures
The measures LogCon uses to protect data – at a glance. Binding is annex 1 of the data processing agreement (DPA).
Hosting in the EU
Operated in data centres within the EU. Internal services such as database and storage are not publicly reachable.
Encryption
TLS 1.2+ for every connection. Integration credentials encrypted with AES-256-GCM and masked in API responses.
Passwords & keys
Passwords hashed with bcrypt, API keys stored as SHA-256 hashes only, sign-in via expiring JWT.
Sign-in, 2FA & SSO
Two-factor authentication with TOTP or passkeys (WebAuthn), enforceable for all users by policy, mandatory for platform administrators. Single sign-on via OIDC (Entra ID, Google Workspace, Okta) and SAML 2.0 with domain verification, JIT and SCIM provisioning. Account lockout after repeated failed attempts.
Roles & tenant separation
Ten standard roles plus custom roles with field permissions for prices and margin, branches with their own data access. Every table carries the tenant ID, every query filters on it.
Audit log
Every change and every AI action with actor, time and before/after state – filterable and exportable for administrators. Documents with SHA-256 checksum.
Backups
Daily encrypted backup of the database and documents, retained for up to 12 months; the encrypted copy outside the main data centre exists once an off-site target is set up (see sub-processors). An automated restore drill restores the backup into a separate database every week and verifies tables and document checksums.
Retention & deletion
Automatic deletion jobs for notifications, spam e-mails, Copilot conversations and expired proposals after fixed periods.
Secure interfaces
Webhooks with HMAC-SHA256 signatures, scoped API keys, rate limits against abuse.
- The measures are described but not certified: LogCon currently holds no ISO 27001 certification.
- Found a vulnerability? Write to us via the contact form – we reply in confidence.
Security question or found a vulnerability?
Write to us via the contact form – we will reply confidentially.
Copilot
Your transport-file Copilot
Find orders, understand operations and prepare changes using the context of your current page and tools available to your role.
Relevant workflows: Explore the original interface, available tools and approvals in the handbook and demo.
Available tools depend on role, plan and configuration. Copilot mutations prepare proposals. Background agents separately follow configured autonomy levels.