Privacy by design at the despatch bench

Your system stays the record

Recipient details are read from your work order when it is scanned, and are read-only at the bench. A wrong address is corrected in your own system, then scanned again, so there is never a second copy drifting out of step.

What ParcelOffice keeps

To book, reprint and investigate a shipment, ParcelOffice keeps a snapshot of the work order as it was booked, the shipment details the courier returned, and the labels. Work-order snapshots are encrypted. Every booking records who scanned it, at which station and with which preset, in a history that cannot be edited.

What stays out

• Updates to your systems carry tracking references and statuses, but no recipient address and no label files.
• Rule writing sends only the rule, your list of fields and example data to the AI model. Live orders and recipient details are never sent.
• At the bench, approved rules run inside ParcelOffice without calling any AI model.
• Viewers, a read-only role, see the despatch history without recipient details.

Who can do what

People sign in with SmartFACT Accounts, by invitation. There are no shared passwords and no sign-in by barcode. Administrators and supervisors confirm a second factor each session, and sensitive actions, such as changing credentials, activating presets, reprinting or cancelling, need a recent check.

Stations are paired browsers, each operator signs in by name on the station they use, and idle stations lock themselves.

Signed, guarded connections

Lookups and updates are signed in both directions. ParcelOffice connects only to public HTTPS addresses and refuses private and internal ones, so a misconfigured endpoint cannot reach inside a network.

Before you get in touch

The early-access form is for general information about your workflow. Please do not send customer addresses, courier credentials or order exports through it; onboarding sets out how your data is handled. The ParcelOffice privacy notice explains how enquiries are handled.

Read next

• For developers and IT teamsWhat developers and IT teams build to connect ParcelOffice: a signed work-order lookup, a receiver for signed despatch updates, and nothing at the bench.
• Tracking back to the work orderParcelOffice sends the shipment and tracking reference back to the job that started it, with signed updates, retries and a backlog an administrator can replay.
• For despatch supervisorsHow ParcelOffice runs at the packing bench day to day: stations, presets, held despatches, reprints and uncertain bookings, from the supervisor’s side.