Security Policy | MAJISA ROAD CARRIER

1 Information Security Vision & Governance

At MAJISA ROAD CARRIER ("MRC", "we", "us", "our"), protecting commercial logistics data, industrial shipment manifests, customer contact channels, and digital systems against cyber threats, unauthorized intrusion, and physical interception is of paramount institutional priority.

This Technical Security Policy details the multilayered technological defenses, cryptographic standards, server hardening measures, and secure development lifecycles deployed across our web architecture (https://majisaroadcarrier.com), our official Android application (com.iatc7.MajisaRoadCarrier), and our physical logistics dispatch centers in Tanawara, Jodhpur, and Pachpadra, Balotra, Rajasthan.

Zero-Trust Philosophy: Our software and network architecture operate on the principle of Least Privilege and Zero-Trust. Every incoming request, submission form, API call, and asset load is authenticated, sanitized, validated, and monitored against anomalous patterns before execution.

2 Cryptographic Standards & Data In-Transit Encryption

All communications between end-user devices, mobile clients, and our backend logistics engines are strictly shielded using high-grade cryptographic standards:

TLS 1.3 & Strong Ciphers

Production web traffic is terminated over Transport Layer Security (TLS 1.3 / 1.2) utilizing 256-bit Advanced Encryption Standard (AES-GCM) with Elliptic Curve Cryptography (ECDHE) for perfect forward secrecy, preventing eavesdropping and packet snooping.

Mandatory HTTPS & HSTS

HTTP Strict Transport Security (HSTS) headers (max-age=31536000; includeSubDomains) are enforced by our Apache/LiteSpeed web servers, automatically upgrading non-secure connections and prohibiting insecure downgrades.

Content Security Policy (CSP)

Robust HTTP CSP directives restrict script execution strictly to verified internal origins and whitelisted CDNs, neutralizing Cross-Site Scripting (XSS) and unauthorized iframe embedding attempts.

Anti-Clickjacking & MIME Sniffing Protection

Headers X-Frame-Options: SAMEORIGIN and X-Content-Type-Options: nosniff are returned on every HTTP response to shield user viewports from clickjacking overlays.

3 Mobile Application Sandboxing (Google Play & Android OS)

Our native Android application (com.iatc7.MajisaRoadCarrier) operates inside the secure Android application sandbox:

Zero Invasive Permissions: Unlike intrusive logistics trackers, the MRC app requires only standard internet connectivity (android.permission.INTERNET) and network state checks. We deliberately do not request background audio recording, camera access, contacts list reading, or persistent background GPS location.
Isolated Process Execution: The application executes in its own distinct Linux process with a dedicated system UID assigned by Android OS, guaranteeing that no rogue third-party app installed on the device can access MRC local cache data or quote drafts.
Hardened Webview Runtime: The integrated Capacitor runtime disables dangerous remote JavaScript execution interfaces and operates with secure origin restrictions.

4 Server Hardening, Network Firewalls & Abuse Prevention

Our cloud hosting instances and edge nodes are fortified with rigorous defense-in-depth mechanisms:

DDoS Mitigation & Rate Limiting: Automated Web Application Firewalls (WAF) inspect incoming traffic in real-time. Excessive burst inquiries, automated scrapers, and volumetric layer-7 attacks are throttled or banned at the network perimeter.

Restricted Directory & File Access: Our production server configuration strictly bars public exposure of backend source code, configuration manifests (package.json, .env), build scripts, and legacy administrative endpoints through strict 404/403 handler interceptors.

Automated Security Shield (security-shield.js): Client-side rate limiters verify human interaction patterns on contact and quotation submission triggers, rejecting robotic form flooding without degrading user fluidity.

5 Physical Security & Operations Center Controls

Cybersecurity is reinforced by stringent physical facilities protection across our Rajasthan operations:

Tanawara Jodhpur Headquarters: 24/7 CCTV surveillance monitoring physical dispatch desks, document archives, and vehicle loading checkpoints.
Pachpadra Refinery Field Station: Access control badges restricted solely to verified transport supervisors handling industrial consignment bilty documents.
Secure Physical Storage: Physical Lorry Receipts (Bilty copies) and driver logbooks are held in lock-secured archival cabinets accessible only to authorized managerial personnel.

6 Responsible Vulnerability Disclosure & Bug Bounty Channel

Majisa Road Carrier welcomes responsible disclosures from security researchers, ethical hackers, and academic investigators. If you detect an anomaly, open port, header misconfiguration, or vulnerability:

Security Response Email:

Transmit an encrypted or detailed report to majisaroadcarrier2025@gmail.com with the subject line "Responsible Security Vulnerability Disclosure".

Safe Harbor Guarantee: We promise not to pursue legal action against researchers who disclose findings in good faith, avoid privacy invasion or service degradation, and afford our engineering team reasonable time to remediate before public dissemination.

7 Official Cybersecurity Operations Contact

Cybersecurity & Network Infrastructure Team

MAJISA ROAD CARRIER • Technical Operations Center

Direct Security Hotline: +91 9057240488

Engineering & Security Desk: majisaroadcarrier2025@gmail.com

Headquarters: Plot No. 3, Radhakrishnapuri Nagar, Opp. Iskon Temple, Tanawara, Jodhpur, Rajasthan - 342013, India