Your Data, Protected
Yard management software handles sensitive business data — financial transactions, vehicle records, contact information, and compliance filings. We take security seriously at every level of the platform.
Encryption in Transit
All data transmitted between your browser and UpLift's servers is encrypted using TLS (Transport Layer Security). This prevents eavesdropping, tampering, and man-in-the-middle attacks.
Password Security
Passwords are hashed using bcrypt with salt, a one-way algorithm that makes it computationally infeasible to reverse. We never store passwords in plain text.
Role-Based Access Control
UpLift includes role-based permissions across POS, vehicles, commodities, and admin. Control who can view, create, edit, or delete data in each module — from POS voids to pricing rules to NMVTIS exports.
Field-Level Audit Trail
Every change in UpLift is logged — who changed what, when, and the before/after values. This creates a complete audit trail for accountability, compliance, and dispute resolution.
Tenant Data Isolation
Each yard's data is completely isolated from other tenants. Database-level isolation ensures that one yard's data can never be accessed by another, even in multi-tenant environments.
CSRF & Session Protection
Authenticated forms include CSRF token validation. Sessions use secure, HTTP-only cookies and are regenerated at login. Account lockout and self-serve password reset are not yet enabled.
Additional Security Measures
Regular automated backups ensure your data is protected against hardware failures and can be restored quickly.
All user input is validated and sanitized to prevent SQL injection, XSS, and other injection attacks.
All database queries use parameterized prepared statements to eliminate SQL injection vulnerabilities.
Login attempts, permission changes, and administrative actions are logged for security monitoring and compliance.
Passwords are stored with bcrypt. Complexity rules, lockout, and self-serve reset are planned — administrators can set a new password for a user today.
Questions About Security?
We're happy to discuss our security practices in detail. Reach out to our team.
Contact Us