Security

Security and Audit Trail

Logistics data is commercially sensitive: freight rates, subcontractor costs and customer profitability. Kargon™ restricts access layer by layer and records every change.

Module scope

  • Role-based page permissions
  • Branch visibility
  • Field masking
  • Financial controls
  • Audit trail (old / new value)
  • User, IP and timestamp logging
5

layer access and control model

5 permissions

per page: view, add, edit, delete, export

***

fields masked for unauthorized roles

Same transaction

audit record written in the same database transaction as the data

5.3 Security

Five-layer security

  1. Role-based page permissions

    Separate view, add, edit, delete and export permissions for every page; additional role-specific permissions.

  2. Branch visibility

    Users are assigned to branches; cross-branch visibility mapping; finance screens limited to the active branch.

  3. Field masking

    Selected fields appear as *** for unauthorized roles; freight and net profit visible to managers only; international screens require a separate permission.

  4. Financial controls

    Posting to closed periods blocked; approval requires debit = credit; reversing entry on cancellation; duplicate accrual protection.

  5. Audit trail

    Every insert, update and delete is recorded with old and new values, changed fields, user, IP and timestamp in the same database transaction.

Approval workflows

Payment type changes require approval from the origin branch; variance adjustment slips and critical changes go through approval.

e-Document log

All changes to e-document records are also written to a separate log.

Traceable files

Bank statements are stored with a SHA-256 fingerprint; a line-level transaction log is kept.

Free demo

See your operation running on Kargon

Let's walk through the modules and screens that fit your business model together in a short online meeting.