The right person.
The right load.
Cargo does not move until both are proven. Face ID locks the identity. The package code locks the assignment. Remove either one and you reopen a hole.
Pickup → Delivery
Person
Face ID
Package
Package code
Delivery
Face ID
Cargo is stolen at the handover
Criminals use stolen carrier accounts and fake paperwork to pick up loads that were never theirs. The weak point is the moment of pickup — so that is exactly where we put two locks.
Gate 1 — Face ID proves the person
At pickup the driver scans their own face. It is matched against the registered driver. A stranger with the right documents is stopped on the spot.
Gate 2 — the code proves the load
Only after the face passes does the driver enter the package code. The code is delivered straight to the assigned driver — never read out by the company. A real driver still cannot grab a load that was not assigned to them.
Delivery — Face ID again
At drop-off the driver scans once more. The same verified person who picked up is the one who hands it over — end to end.
Simple to use, strict underneath.
Real face capture + liveness
A live camera scan with a liveness prompt — not a photo upload. The driver must be physically present.
Code delivered to the driver only
The package code is sent to the assigned driver’s device through dispatch. It is never shown to the company and never travels on the shared live feed.
Decided on the server
Every pass or fail is decided by the backend, never by the phone — so a tampered app cannot fake a green light.
Location, device & time
A quiet risk layer scores the GPS distance, whether the device is known, and the pickup window. Soft signals that flag for review — they never hard-block on their own.
Live across two devices
The company and the driver stay in sync in real time over a live stream, paired in one tap with a QR code.
Choose this device
Run one role here and the other on a second device. They sync live.