MMV protects customer data with a layered access-control model and encryption in transit and at rest.
Role-based access
Every user is assigned a role within their organization's account. Permissions are enforced at the application layer — the data a user can see depends on their role and on the vessels or sub-accounts they are assigned to.
MMV staff access
MMV support and engineering staff who need access to customer data as part of their work do so through audited, role-limited administrative interfaces. Access is granted on the least-privilege principle and reviewed regularly.
Encryption in transit
All connections between users, the mobile app, and the MMV service use TLS (HTTPS). Older, weaker cipher suites are disabled.
Encryption at rest
Customer data stored on MMV servers and in database backups is encrypted at rest using industry-standard algorithms.
Authentication
Passwords are stored using industry-standard hashing (never in plaintext). Users are required to keep credentials confidential and to use secure password practices. See the Terms of Service, User Responsibilities.
Questions about this document?
Contact your MMV account manager or open a support ticket.