Understand protected POD storage
This guide explains that how captured evidence is retained.
Where to goAdmin Area → Courier & Logistics → Delivery Notes → Open note
What this guide helps you do
Know how captured evidence is retained. The instructions below follow the supplied module’s controller, form and model rules, including server-side validation and downstream effects.
Follow these steps
- Go to Admin Area → Courier & Logistics → Delivery Notes → Open note.
- Check the source record and choose the supported action.
- Save or submit once, then reopen the record and verify the result.
Fields and options
File extensionEncrypted/protected .clm storage representation.
IntegritySeparate SHA-256 hashes for signature and snapshot.
AccessServed through controlled token routes.
ContextNote ID, signer, IP, user agent and timestamp.
Rules and limits
- Do not rename or move protected capture files manually.
- Use the application route for review and retention.
Check it worked
- The source record, status/history and any downstream notification, provider, POD or finance record should agree after the action.
Security, audit and operational checks
- Use the exact record and least-privilege role before changing any state.
- Verify the saved record after every action; a browser message alone is not evidence that every downstream step completed.
- Use protected document and image routes rather than exposing server filesystem paths.
- Keep customer, driver, provider, financial and credential data within the authorised workflow.
- For provider, finance, employment, transport and compliance decisions, follow the organisation’s authorised professional process.
Do not bypass the code flowDo not force database values, invent a status, mark a job completed without signed POD evidence, or expose encrypted credentials to make a screen appear successful.
Related guides
Was this guide useful?Your response is stored only in this browser.