Security — MixDispatch

Your company’s data is kept apart

Every company’s records live in their own separate area of the database. The application opens only the area for the company you are signed in to.

Sign-in

Passwords are stored hashed, never in plain text, and password links work once and expire.
Sign-ins are rate limited. Drivers sign in with a PIN, with lockouts after repeated failures and a known-device exception so an outsider cannot lock a real driver out.
New companies confirm their email address. MixDispatch’s own staff console requires two-factor sign-in.

Who can do what

Administrators choose, person by person, who can quote, dispatch, invoice, record payments, see reports, give discounts or void. Settings and the team are for administrators only.

An audit trail

Changes are recorded with who, when, from which device and what the value was before and after, in a log only administrators can read. If MixDispatch support ever signs in to help a company, that is recorded in the company’s log with the staff member’s name.

In transit and in storage

The website and app are served over HTTPS with strict transport security. Card payments are handled entirely by Stripe: card numbers never reach MixDispatch. Data is backed up nightly.

Found a problem?

If you think you have found a security issue, please email hello@mixdispatch.com before telling anyone else. We will reply quickly and thank you.