Security & privacy
How workspace access, document storage, signing links and document processing work in MoveBoss OFS.
Workspace controls
Access and document handling
Your workspace brings together your company’s contracts, jobs, and signed paperwork. Access follows company membership, team roles, and job assignments.
Your office
Your owner and active office staff can manage company paperwork.
Your assigned crew
Drivers can open paperwork for jobs assigned to them.
People on the job
A customer signing link opens one job’s paperwork. A carrier load link opens only the jobs your office selected, with no access to your company’s contract library.
You control team membership and job assignments.
How your paperwork is kept
Contracts, signed copies, and scanned pages are held in private storage. The server checks company access before creating a temporary download link that expires in minutes. Company access is also enforced by the database.
Access follows your own roles: office staff see company jobs, drivers see only the jobs assigned to them, and deactivating a team member ends their access straight away. Signed PDFs and signatures cannot be replaced or deleted from anyone’s browser. MoveBoss’s servers read paperwork to fill contracts and prepare signed copies, running on hosting, storage and email providers that process it for those tasks. Access on our side is limited to operating and supporting your account: your paperwork is not sold, not shared with other moving companies, and not used for anything else.
Who can see the OFS inbox address?
Each company workspace has its own OFS email address. The owner and office staff can find it in the app and share it with the brokers, CRM, and staff who send orders for service. Incoming emails are routed to that company’s inbox.
How are company contracts organized?
Uploaded contract templates and jobs are organized within your company’s workspace. Templates are not automatically published as shared templates or added to the website demo.
What happens when I send a signing link or a PDF?
A signing link is a private access key for one job; a carrier load link covers the selected jobs in that load. Anyone who has a valid link can use it, so share it only with the intended customer or carrier. Delivery links stay available throughout the trip until the office revokes access or cancels the job. Completed delivery paperwork becomes view only. Removing a job from a load also revokes that load’s individual link for the job. Download links are temporary. Completed pickup signers may retain access to their signed copy after the signing deadline until the signing link is revoked. Signed copies are also emailed to configured staff and customer recipients. PDFs already downloaded or sent by email remain with their recipients.
Where does the automatic processing happen?
Documents are processed by the MoveBoss application, hosted on Vercel, and stored with Supabase. Resend handles incoming OFS emails and outgoing paperwork emails. Standard OFS text extraction runs in our application. An optional AI-assisted reader for unfamiliar or scanned OFSs sends the source OFS to OpenAI when enabled; it is disabled by default and does not receive your blank contract templates. AI-assisted results require office review.
Who controls staff and driver access?
The company owner adds and deactivates team members and chooses their roles. The office assigns pickup and delivery jobs. Office staff have company-wide job access; drivers have access through their assignments. Signing links are separate job-specific access, so keep them private too.