Security
Security for operators who cannot afford guesswork.
Rydmate protects the records that decide where money went, who handled it and what happened on the road. The important guarantees are enforced in the system, not left to policy.
Six guarantees
Built to prevent the failures that cost operators money
- Phones cannot settle fares
- Electronic fares are settled only after server-side provider verification. Not the passenger browser. Not the driver app. Not a screenshot.
- Tenants cannot see each other
- Every tenant record carries its organization, and cross-tenant requests return not found so another operator cannot learn your records exist.
- Money stays in its lane
- Verified electronic payments, declared cash and unconfirmed POS claims stay separate on dashboards and reports.
- History is preserved
- Reconciliation and corrections create records instead of rewriting the past, so the audit trail remains useful.
- Payment credentials stay protected
- Provider credentials are encrypted at rest and never displayed again after they are saved.
- Sensitive actions are attributable
- The audit trail records who did what, when and from where for privileged operational changes.
Everyday practice
The boring controls that make the product trustworthy
Server-side sessions
Sign-in creates a server-held session in a hardened cookie. Password changes keep the current session and sign out every other device.
- HttpOnly cookies
- CSRF protection on writes
- Rate-limited sign-in
Permissioned access
Access is checked by permission, not by role label. A driver cannot open finance, and no user can grant power they do not hold.
- Eight system roles
- Branch-scoped access
- Audited in CI
Uploads are cleaned
Profile pictures are decoded, cropped and re-encoded before storage so metadata and hostile file tricks do not survive.
- Size and dimension limits
- JPEG, PNG and WebP only
- Immutable served assets
Found something? Write to security@rydmate.com. We read every report and answer within two working days.
Run the operation on controls you can explain
Rydmate gives owners a clean record of money, movement and responsibility, with safeguards behind the scenes.