Explainable, repeatable, recoverable

Shipping decisions move money, stock, and customer promises. The platform is built so that any sensitive action can be explained after the fact, repeated safely, and recovered when a provider fails mid-flight.

AUTHORITY

Server-owned scope

Tenant, client, and location scope are resolved on the server. The browser never selects its own authority.

SAFETY

Idempotent writes

Replay protection and version checks stop duplicate bookings and stale operations from being applied twice.

RECOVERY

Unknown, not assumed

A carrier timeout is recorded as an unknown outcome and becomes reconciliation work rather than a blind retry.

EVIDENCE

Reconstructable history

Source lineage, versions, validation attempts, operations, and provider results are retained per order.

Access and identity

Authority is explicit at every layer, and support access is never silent.

Roles and permissions Granular permissions per company, client, and location. A user's visible workspace is derived from their grants, not from a client-side filter.

Approvals Each company sets who may approve what, and at which thresholds. Orders are bound to the policy version in force when the decision was made.

Support access Designed as a consented, ticket-linked, scoped, expiring, revocable grant with a full audit trail — not silent impersonation.

Carrier credentials Carrier accounts stay owned by the merchant. Credentials are stored per company and never shared across client workspaces.

API and CLI Programmatic access runs through the same authorisation model as the interface. There is no privileged back door for automation. See the API reference.

Oil painting — cool marble archive, shelved scrolls in bays, a clerk pressing a seal at a long table, high shafts of light

AI TRUST POSITION

AI may assist interpretation. Deterministic validation and authorised product services control shipping actions.

An AI-requested action must stay inside the requesting user's permissions and the company's policy.

It must show a preview of exactly what will change before anything is applied.

It must remain revocable and auditable, with the model named in the record.

ZeroClickShip AI is currently product direction and architecture. The workspace does not contain live model inference today.

Platform and data

Deployment posture, retention, and compliance work in progress.

HOSTING

UK/EU region hosting for the pilot, with data residency agreed before onboarding.

ENCRYPTION

TLS in transit and encryption at rest, with carrier credentials held in a separate secret store.

RETENTION

Order evidence and audit records retained per an agreed schedule; export available on request.

UK GDPR

Processor terms, subprocessor list, and DPA provided as part of pilot onboarding.

ISO 27001

Controls being aligned to the standard. Not certified — we will say so plainly until we are.

UPTIME

Live component health is published on the status page. Pilot SLAs are agreed per engagement.

Send us your security questionnaire

We answer honestly, including where a control is planned rather than in place.

ZeroClickShip

Evidence-first shipping operations for UK ecommerce teams and fulfilment operators.

Product

Overview How it works Trust & security Pricing

Developers

Developer portal API reference Guides CLI MCP server

Support

Help centre Status Contact

Company

About Blog & changelog Careers Legal & privacy

ZeroClickShip is a shipping operations platform. Carrier services are contracted directly between the merchant and the carrier under the merchant's own accounts. Capability status shown on this site reflects demonstrated, in-source, and roadmap work; provider activation is subject to integration and acceptance testing. © 2026 ZeroClickShip Ltd.