Security Philosophy: Agricultural records in Botswana represent generational family wealth and commercial business intelligence. PlaasTrack is architected with zero-trust principles: your data is isolated, protected with military-grade encryption, and resilient against kraal power outages, signal blackouts, or lost mobile hardware.
1. Role-Based Access Control (RBAC) & Administration
Farming businesses require granular permission boundaries between owners, managers, crush operators, and veterinary consultants. PlaasTrack enforces strict tiered access:
Farm Owner / Syndicate Principal
Full administrative authority: access to profit-per-head analytics, bank accounts, land parcel leases, and multi-farm consolidation.
Ranch Manager / Foreman
Operational permissions: pasture rotation planning, herd movement authorization, lick/diesel inventory logging, and staff duty logs.
Kraal Herder / Field Staff
Streamlined input-only mode: rapid ear tag search, calf birth logging, mortality notices, and crush vaccination tallies without access to farm financials.
Veterinarian / Inspector Access
Time-bound, read-only audit access for livestock movement clearances, vaccination batch verification, and BAITS audit inspection.
2. Offline Cryptographic Vault & Storage Security
Because cattle posts operate beyond cellular tower range, PlaasTrack incorporates a local SQLite database directly on your mobile device:
- Encrypted SQLite Vault: Local databases are encrypted on disk utilizing SQLite encryption extensions with device-bound keys.
- Tamper-Evident Audit Trails: Every herd modification, birth record, or tag reassignment records an immutable timestamp and author device identifier.
- Conflict-Free Synchronization: When multiple phones or notebooks record calves simultaneously during kraal processing, our sync engine intelligently reconciles records without data loss upon reconnection.
3. Cloud Infrastructure & Data Pipeline
Our cloud infrastructure is built on high-availability, ISO 27001-certified Supabase and PostgreSQL enterprise clusters:
- Encryption in Transit: TLS 1.3 encryption with Perfect Forward Secrecy across all web, desktop, and mobile sync channels.
- Encryption at Rest: AES-256 block-level encryption across cloud database tables, backup archives, and photo attachments.
- Continuous Automated Backups: Point-in-time recovery (PITR) with redundant multi-region snapshotting to guarantee zero loss of generational herd pedigrees.
4. Data Isolation & Tenant Partitioning
Row-Level Security (RLS) policies are enforced at the database kernel level. No farmer or external user can query, inspect, or modify records belonging to another cattle post or holding, even in the event of an application-layer bug.
5. Physical Device Loss & Emergency Revocation
If a phone or tablet is lost, damaged, or stolen at the cattle post, farm owners can instantly revoke that device's access token from the web dashboard. Once revoked, the remote device is purged and locked upon reaching network connectivity.
6. Security Audits & Vulnerability Reporting
We maintain an active security review program. If you are an agricultural researcher or security specialist who has discovered a potential security vulnerability, please report it immediately to our security response team:
Security Response Team: info@plaastrack.com
Subject line: [SECURITY AUDIT] PlaasTrack Infrastructure