DockVerdict Security, Tenant Isolation & Human-in-the-Loop Architecture
Last Reviewed: November 11, 2026
Security & Vulnerability Desk: security@dockverdict.com
DockVerdict is engineered specifically for high-volume financial and risk-compliance workflows where mathematical accuracy, auditability, and tenant isolation are non-negotiable.
1. Deterministic Math + Bounded Multimodal Extraction
- Why Pure Generative AI Fails in Freight AP: Unbounded language models can misread handwritten dock timestamps or hallucinate arithmetic totals. DockVerdict separates field extraction from financial decisioning:
- Multimodal vision models extract structured fields and bounding-box page citations from PDFs.
- 100% deterministic TypeScript/JavaScript rule engines execute every dollar calculation, DOE fuel surcharge lookup, detention free-time comparison, and ACORD 25 coverage-limit check.
- Every Flag Carries a Verifiable Citation: Discrepancy holds (
DISCREPANCY_HOLD) and COI failures (FAIL) attach exact document coordinates so AP controllers verify findings in seconds.
2. Mandatory < 0.90 OCR Human-in-the-Loop Safety Gate
- Automatic
HUMAN_REVIEWQuarantine: Any handwritten Bill of Lading arrival/departure timestamp, lumper receipt, or policy endorsement scan scoring below 90% (0.90) extraction confidence is automatically quarantined intoHUMAN_REVIEW. - Zero Autonomous Payment Execution: DockVerdict never initiates ACH/wire payouts and never mutates your ERP ledger without explicit controller approval and export (
dockverdict_qbo_vouchers.csv). - Carrier Insurance Payment Gate (
COI_PAYMENT_HOLD): When enabled, approved AP vouchers are automatically cross-checked against the carrier's active ACORD 25 expiration date and coverage minimums prior to voucher export.
3. Encryption, Tenant Isolation & Loop Protection
| Control Domain | Implementation Standard |
|---|---|
| Transport Encryption | Mandatory HTTPS / TLS 1.3 with HSTS across dockverdict.com |
| Payment Card Security | 100% hosted Stripe Checkout (PCI-DSS Level 1) + HMAC-SHA256 webhook verification |
| Duplicate & Loop Defense | SHA-256 payload fingerprinting blocks duplicate charges and email forwarding storms |
| Zero Model Training | Paid enterprise API endpoints; customer rate sheets and BOLs never train public models |
| Secret Management | Encrypted edge runtime secrets; zero credentials stored in client code or repositories |
4. Responsible Disclosure & Enterprise Security Reviews
If you believe you have discovered a security vulnerability in DockVerdict, please report it confidentially to security@dockverdict.com. We acknowledge all valid reports within 24 business hours.