Express courier. Direct.
Also overnight.
x25pronto Switzerland takes goods direct to the destination. Small loads go by car. Larger loads go by van or Van XL. Direct, express and overnight trips run Monday to Sunday when a slot is free. Free times are shown in the booking calendar. This keeps the plan clear.
Roles & access control: governance for courier company accounts
Start with defined user types, tiered permissions and 2FA rules. That protects customer data and operations for courier firms in Zurich, Bern and Geneva.
Quick answer
Effective governance for courier company accounts means defined user types, tiered access levels, clear approval workflows and mandatory two‑factor authentication. These steps lower risk to customer data, shipment details and billing and create clear accountability.
Why governance matters for courier firms
Courier firms handle addresses, sender/recipient data and billing details. Unrestricted access can cause data breaches, misdeliveries or billing errors. Governance adds transparency, reduces mistakes and protects business customer trust in Zurich, Bern or Geneva.
Common user types and roles
Define clear roles. Typical roles: Admin (company owner), Dispatcher (route planning), Finance (invoices & credits), Driver (access to assigned shipments only), Support (customer contact). Give each role only the rights it needs.
Practical role‑based access control (RBAC)
Use RBAC instead of ad hoc full access. Create role profiles with read, write and approval rights. Example: Dispatchers can create jobs and assign drivers but cannot edit invoices. RBAC simplifies onboarding, offboarding and compliance checks.
Authorization workflows and approval levels
Introduce workflows for sensitive actions: invoice changes, discounts, or address edits on sensitive shipments. Use at least two approval levels for high‑risk changes. Record who approved what and when.
Two‑factor authentication and password policy
Enable 2FA for all users with system access. Recommend time‑based one‑time codes (TOTP) or hardware tokens. Pair 2FA with minimum password length, complexity rules and forced review after security incidents.
Onboarding, offboarding and temporary access
Strong entry and exit rules reduce risk. Have checklists: create account, assign role, set up 2FA on onboarding; revoke rights, terminate sessions and collect devices on offboarding. For external vendors, use time‑bound accounts that expire automatically.
Frequently asked questions
What role should the company owner keep?
The owner should keep an admin account for governance tasks only. Protect it with 2FA. Delegate daily work to other roles to reduce risk.
How do I log permission changes?
Use audit logs capturing user ID, timestamp, action and affected objects. Record the reason and approver. Logs help with incident analysis and customer inquiries.
Are temporary accounts safe?
Yes, if they are time‑limited, have narrow permissions and expire automatically. Avoid shared accounts across multiple users.
Which 2FA method is best?
TOTP apps and hardware tokens are recommended. SMS is acceptable but less secure than these options.