Data and security
This page describes the controls RushHour gives your company over its data and over who can reach it.
Each company's data is kept separate
Your organization's RushHour account (its tenant) contains one or more companies. Business records — customers, orders, routes, drivers, trucks, invoices and settings — each belong to one company.
- When you are signed in, RushHour scopes the business records it shows and changes to the company you are currently working in. Records of other organizations are not part of your account.
- If your organization has several companies, you can only switch into the ones your user account belongs to. See Switching between companies.
Access is based on roles and permissions
What each person on your team can see and do is decided by their roles and by the permissions those roles have in your company. Menu entries for areas a user can't view are hidden, and actions they aren't allowed to take are refused. Some sensitive actions, such as deleting users, resetting or setting another user's password, and managing Customer Portal logins, are reserved for the Company Admin role. Adding and editing users is controlled by its own permission, which only the Company Admin role has when a company is created.
See Users, roles and permissions for the details.
Drivers' personal details are protected
Driver records can hold sensitive personal information. A driver's social security number, date of birth, driver's license details and image, and home address are only shown to users with the Drivers settings - view details permission. For everyone else these fields are left empty on the Drivers pages.
Customers only reach their own account
Your customers' staff use separate logins for the Customer Portal.
- A Customer Portal login can only use the functions the Customer Portal needs.
- Its records are limited to its own customer account, such as that customer's own orders and invoices.
- Your Company Admins invite customers to the portal. A customer who already has a login can also invite colleagues, and those logins are limited to the same customer account.
- Company Admins can disable or delete any portal login at any time in the Customer Portal Access window, opened with Invite to Portal on the customer.
Account controls
- Invitations. New Company Portal users set their own password through a link in their invitation email. Invitation links stop working after a limited time.
- Forgotten passwords. Users reset a forgotten password through a link sent to their email address.
- Password resets by an administrator. When a Company Admin sends a password reset to another user, or sets a new password for them, that user is signed out.
- Disabling a user. Disabling a user in Settings → Users stops their access straight away, without deleting their account or history. You can enable them again later.
Activity logs
Settings → Activity Logs shows what has happened in your company account — for example sign-ins and sign-outs, failed sign-in attempts, password changes and resets, and the sessions each user worked.
Which tabs you see depends on your permissions:
| Tab | Who sees it |
|---|---|
| All, User sessions | Everyone who can open Activity Logs. |
| AI Activity | Users with Activity log - view own AI activity or Activity log - view all users AI activity. |
| System Activity | Users with Activity log - view all users. |
Users with Activity log - view all users see everyone's activity. Users with Activity log - view own activity log see only their own.
Orders also have their own Audit log tab, which shows the history of changes to that order.
Document retention
In Settings → Profile → Document retention you can set a retention window, in days, for the documents uploaded to your company. Preview retention report then lists the documents older than that window so you can review them, and shows which documents are protected and kept.
The report is for review only: RushHour never deletes documents automatically because of this setting. Leave the window blank to turn it off.
Public tracking links
Public tracking links are not available yet. When they arrive, they will be the one part of RushHour that answers somebody who is not signed in, so they are worth understanding before you turn them on. The controls planned for them are these:
- The whole feature is off until your company turns it on, in Settings → Tracking Links. While it is off, no link your company could issue will open.
- The link is the credential. There is no sign-in and no password: whoever holds the address can see the page, and RushHour cannot tell who they are. Only share a link with the people who should follow that shipment, and expect it to be forwarded.
- One link covers one order. A link never reaches another order, another customer or any list, and the page it opens carries no prices, no invoices, no notes and no driver identity.
- Links expire, after a number of days your company chooses, and any link can be revoked on its order at once — which stops it for everyone who already has it.
- How much of the vehicle's position a link shows is your company's choice: a rough area, nothing beyond the last completed stop, or the exact position while the driver is heading to that shipment. The most revealing option is never the starting value, and no option ever shows where the vehicle has been.
- Addresses that are hidden on the paperwork stay hidden on the page. A blind shipment's delivery shows the same details on the tracking page as on its bill of lading.
See Tracking links for how a link is created and shared, and Tracking Links settings for the company-wide switches.