Home / Platform / Security & Trust
Security & trust

Security, resilience and trust by design.

RouteSync is built to meet the security, procurement and connectivity rules of public authorities and enterprises — deployed where you need it, integrated safely, and resilient when conditions aren't ideal.

Deployment & data residency

Your data stays where your rules require.

Run RouteSync where your security and procurement policies allow — and keep operating through connectivity gaps.

Cloud, on-premise or hybrid

Deploy fully in the cloud, entirely within your own data centre, or as a hybrid — whatever your security and procurement rules require.

Data residency

On-premise and hybrid options let data remain within your chosen jurisdiction and infrastructure, supporting local data-residency requirements.

Confirmed per engagement

Hosting, architecture and security controls are scoped and confirmed for each deployment — tailored to your environment, not assumed.

Access & data protection

Controlled access, protected data.

The fundamentals that keep an operating platform trustworthy day to day.

Role-based access

Least-privilege, scoped permissions so each user — planner, controller, driver, executive — sees only what their role needs.

Single sign-on

Integrate with your directory and identity provider via SSO, SAML and OAuth for centralised, auditable access control.

Encryption

Data is protected in transit and at rest, so information moving between depot, field and control room stays secure.

Audit trails

Actions and changes are logged — who did what and when — giving you audit-ready evidence rather than guesswork.

Resilience & availability

Keeps working when conditions don't.

Operations shouldn't stop because the network did.

Online & offline

Field devices keep validating, recording and capturing data offline, then sync automatically when connectivity returns.

No single point of failure

Resilience is designed in across depot, field and control room, so a fault in one place doesn't halt the operation.

Clean reconciliation

After an outage, captured data reconciles cleanly — no lost trips, no double counting, no manual patch-up.

Integration & governance

Safe connections, clear accountability.

Authenticated connectionsScoped, credentialed integrations
Audited data exchangeAFCS, AVLS, GIS, HR and finance
Evidence & logsAudit-ready operational records
The vehicle is an endpoint too. Everything on this page is the platform side. The on-board unit runs its own operating system on a public network, and where it can host an agent it is protected on the device by ShieldSync — endpoint detection, integrity monitoring and port control, with a fleet-wide console. Where a closed third-party OBU will not host one, the vehicle is covered by the controls above and nothing on the device itself, and we say so rather than imply otherwise.
Governance. The data controller for this website is MMI Mobility Private Limited. Security controls, hosting and integration measures are aligned to each engagement's security and procurement requirements. See our Privacy Policy and Cookie Notice for how we handle data on this site.
Evidence

What a security review asks for.

Security questionnaires ask the same questions every time. Here is where each one stands, and how to get the detail — nothing on this page is a claim we cannot evidence in writing.

What reviewers ask forPositionHow to get it

Items marked on request are shared under NDA as part of the security documentation pack, normally within two working days.

Accessibility

Accessibility conformance statement

Standard. This website targets WCAG 2.1 Level AA. Every published page is audited with axe-core and Lighthouse; the most recent audit returned no Level A or AA violations, with a Lighthouse accessibility score of 100.

What that covers. Colour contrast of 4.5:1 or better for body text and 3:1 for large text and interface elements; a visible keyboard focus state on every link, button, form control and accordion; form labels bound to their fields; headings in sequential order; alternative text on images; and full keyboard operation with no pointer-only controls.

Known limits. Product screenshots are decorative and carry descriptive alternative text rather than a transcription of every figure on screen. The platform's own application UI is held to the same target but is assessed separately — ask for the platform accessibility report if you need it for an evaluation.

Feedback. If any part of this site is difficult to use with assistive technology, tell us through the and we will treat it as a defect, not a suggestion.

Thanks — we'll be in touch shortly.