Access
- Role-based workspace routing for admins, staff, riders, clients, and super admins.
- Capability checks for sensitive admin paths.
- Subscription blocking for expired or inactive workspaces.
Security
Security controls for daily courier operations.
Dexa combines tenant scoping, role permissions, subscription gating, audit records, signed public links, API tokens, and webhook controls to support safer courier workflows.
Data Protection
- Business-scoped settings, notifications, payments, and reports.
- Signed invoice and document preview links.
- Audit records for operational accountability.
Integration Safety
- Sanctum bearer tokens for API v1.
- Webhook verification and throttling.
- Business-specific payment credentials.
Deployment Checklist
- Use TLS, strong app keys, private storage, and monitored cron jobs.
- Patch dependencies and rotate credentials when staff or vendors change.
- Keep backups off-server and test restoration before an incident.