Security & Compliance
The boring stuff that matterswhen your business runs on us
TLS in transit, per-tenant data isolation, role-based access, two-factor sign-in, and a tamper-evident audit log on every incident response team. Audit-ready documentation available on request.
99.99%
Platform uptime
256-bit
AES encryption at rest
TLS 1.3
Encryption in transit
15 min
Incident response SLA
Six pillars
How we protect your fleet's data
A dispatch platform holds the three things an operator can least afford to leak: passenger PII, driver earnings, and live vehicle positions. These six disciplines are how we keep all three safe.
Encryption
TLS 1.3 in transit, AES-256-GCM at rest. PII tokenized. Keys rotated quarterly via AWS KMS.
- Every connection — cloud console, passenger app, driver app, embeddable web booker — is encrypted edge to edge
- Card data never touches TaxiDex servers: Stripe and Square tokenize at capture, including Apple Pay and Google Pay
- Encrypted backups with independent keys, restore-tested as part of the DR plan
Access Control
Role-based access, mandatory MFA for admin roles, audit logs retained for 365 days. SSO via Okta, Azure AD, Google Workspace.
- Teams & role permissions in the console — dispatchers, finance staff and fleet managers each see only their scope
- Every sensitive action lands in the audit log and is exportable for compliance reviews
- Driver sessions, PDA settings and SIMs are managed centrally, so a lost device is revoked in seconds
Compliance
Encryption in transit, per-tenant data isolation, role-based access, two-factor sign-in and a tamper-evident audit log. Card data never touches our servers — penetration test.
- Data Processing Addendum (GDPR Art. 28) signed as standard for EU and UK fleets
- Compliance export packages audit trails and records for regulators in one download
- Per-region tax rules and data practices for UK, UAE, Saudi Arabia, Nigeria and Kenya deployments
Infrastructure
AWS multi-region, isolated production, hardened images, automated patching. Disaster recovery RTO 60 min / RPO 5 min.
- Multi-tenant architecture with strict per-fleet isolation — your bookings, drivers and customers stay yours
- 99.99% measured uptime, monitored around the clock with a public status page
- White-label custom domains served over managed, auto-renewing certificates
Vulnerability Management
SAST + DAST in CI, dependency scanning, monthly vuln reviews, responsible disclosure via security@taxidex.com.
- Static and dynamic analysis gate every release before it reaches production
- Third-party dependencies are scanned continuously and patched on a defined SLA
- Penetration-test findings are tracked to closure and summarised in the security pack
Incident Response
A public status page and monitoring alerts. We tell you what happened, and what we changed. Post-mortems shared with affected customers within 5 business days.
- The founders who run your onboarding handle security escalations
- Fleet-side safety has its own tooling: SOS panic alerts surface on the live map and incidents console instantly
- Blameless post-mortems internally — full transparency with affected customers
In the product
Security your dispatchers can see
Platform controls protect the servers. These are the controls your team uses every day inside the console and the white-label passenger app.
Incidents & SOS
A dedicated incidents console, not a buried log
Drivers and passengers get an SOS panic action in both apps. Trigger it and the alert lands in a dedicated incidents console — and as a status halo on the live operations map — with the vehicle's position, the active booking, and the people involved already attached. Dispatchers respond from one screen instead of reconstructing the situation across tools.
VoIP calls run through Twilio with recordings stored against the booking, so disputes and safety reviews have evidence, not recollections. Passengers can share a public track-my-ride link with family, and every dispatcher action along the way is written to the audit log.
Multi-region
Regional rules follow the map — and the money is auditable
TaxiDex runs fleets across the UK, UAE, Saudi Arabia, Nigeria and Kenya, with multi-currency support and per-region tax rules configured in the console — so VAT in one city and a different levy in another are both applied correctly, automatically.
Every fare is computed on the backend by the enterprise fare engine — never in the app — so zone pricing, surge multipliers (which stack with caps), surcharges, promo codes and taxes resolve in one deterministic, auditable flow. Fixed fares stay fixed. When a regulator or a corporate client questions a charge, you can reconstruct exactly how it was calculated.
Documentation
The paperwork your CISO will ask for
We provide a comprehensive security pack under NDA, including:
FAQ
Frequently asked questions
The answers procurement and security teams usually need alongside the security pack.
How long does it take to go live with TaxiDex?
Typical fleets go live in 14 days. We migrate driver data, historical bookings, and customer accounts from Autocab, iCabbi, Cordic, or any legacy system, following a published 14-day protocol.
Does TaxiDex work for limo and chauffeur fleets?
Yes. TaxiDex Enterprise includes flight tracking, hotel concierge web booker, B2B corporate invoicing, and VIP workflows specifically designed for premium chauffeur and corporate transport operations.
What payment gateways are supported?
Stripe (default global), Worldpay (UK), Trust Payments, Apple Pay, Google Pay, plus regional gateways: STC Pay & mada (Saudi), Paystack & Flutterwave (Nigeria), M-Pesa (Kenya), and any custom merchant on request.
Is there a per-driver fee?
No trip overage. TaxiDex is priced per active driver — about £11 ($14) per driver a month on Starter, £9 ($11) on Professional, and from £7 ($9) on Enterprise. That undercuts the rates commonly quoted for Autocab, iCabbi, Cordic and TaxiCaller at every tier, and by 20% or more from Professional upwards. White-label passenger app and data migration are included in the rate; setup is a one-time fee, scoped to your fleet and quoted up front on your demo call.
Can passengers book without installing an app?
Yes. The TaxiDex Web Booker is an embeddable booking widget for desktop and mobile browsers — perfect for hotel concierge desks, airports, and corporate intranets. One HTML snippet to embed.
Security — live, on a call
Bring your security questionnaire. Our team will walk through it with you on a 30-minute call.