Security
How DSP ONE handles your access, your records and your relationship with Amazon.
Amazon
- DSP ONE never asks for, stores or uses your Amazon login, and never automates Amazon's tools.
- Amazon data arrives only as files your team downloads and uploads (route exports, day sheets). We read them; the original file is kept with the import record.
- Steps that happen in Amazon's system, such as moving stops in a rescue, are done there by a person and only recorded in DSP ONE.
Access
- Office and floor staff sign in with email and a password of at least 10 characters; two-step sign-in with an authenticator app is available.
- Drivers sign in with their phone number and a 6-digit code that expires after 5 minutes and allows 3 tries.
- Each company's records are separate. Roles can be granted for one station only, and a station role never counts at another station.
- Restricted details, such as the reason for an absence, are visible only to the roles your company allows and read "Restricted" for everyone else.
Decisions and records
- Groundings, rescues, discipline, payroll and spending are always decided by a person. Agents act alone only under rules your team approved, and anything an agent does on its own can be undone.
- Rules nobody has approved yet are shown as "Not approved yet" and are never enforced.
- Every change is written to an append-only audit log, kept for 7 years.
- Agents never read medical information, HR outcomes, camera footage or attendance detail.
Infrastructure
- The application runs on Vercel; the database is Postgres on Neon; files are kept in private Vercel Blob storage.
- Connections are encrypted in transit (HTTPS). Passwords are stored as one-way hashes, never in plain text.
- Innorve staff can open a company's records only through time-boxed support access, which is logged.
Questions about security: ask your Innorve contact. DSP ONE is a product of Innorve Inc. and is not affiliated with Amazon.