Encrypted in transit
Every connection is HTTPS with modern TLS. Traffic to courier APIs is encrypted on the same terms.
Your shipping data includes your customers' names and addresses. Here is how it is handled.
Every connection is HTTPS with modern TLS. Traffic to courier APIs is encrypted on the same terms.
Data sits in a managed database with access limited to the application. Backups are taken on a schedule and restores are tested.
Permissions are held per group and checked on every request, so a support login cannot reach settlement and a finance login cannot book a shipment.
Sensitive actions record who did what and when. Carrier API calls are logged with credentials and personal data redacted.
Courier usernames, passwords and keys are held server-side. They never appear in a page, a URL or a log line.
CSRF validation on every unsafe request, rate limiting against abuse, and security headers on every response.
Addresses and contact details you upload are used to move your parcels and nothing else. They are not sold, not shared with anyone but the courier carrying the shipment, and exportable or deletable on request.
Create an account, compare what your couriers would charge for a real parcel, and decide from there.