Everything moves. The permissions never do.

Fleet data, customs documents, freight manifests and the dispatcher’s share that three partner companies were given access to for one project, four years ago.

ProLionOct 29, 2026

Book a Demo

NetApp

Syslog CEF and REST, into the tool you already run

See it running

The partner accounts nobody closed.

0:56

Temporary access somebody else inherits.

A logistics estate shares by necessity. What it rarely does is take the sharing back — which is why one phished partner account is a route straight into your data.

Without

Temporary access, permanent folder.

2021 A forwarder is given access to a tender folder for one bid.
2023 The folder quietly becomes the shared dispatch area, manifests and all.
2026 Customer manifests with personal data are found outside the company.
+1 week The authority asks who had access. The answer is the name of a group.

Outcome

A GDPR notification without a list, a customer who now asks every carrier the same question, and no way to tell your partner from whoever is using their account.

With ProLion

The access ends when the bid does.

2021 The same access is granted.
Monthly The exposure report names every external account and what it can actually reach.
2023 Access is withdrawn when the folder changes purpose, with the change on record.
Any time If something does leave, the file-level record says who opened what, and when.

Outcome

Partner access that expires with the project, and an answer ready for the question nobody plans for.

A scenario, not a case study — built from the way these incidents actually run.

What the rules ask for.

Transport is an essential sector under NIS2, and the paperwork behind every shipment is personal data, commercial data and customs evidence at the same time.

NIS2

Transport as an essential sector

Risk-management measures including access control, and the 24-hour, 72-hour and one-month reporting cascade

GDPR

Driver and customer data

Personal data in manifests, telematics exports and delivery records

Customs and trade

Documentation kept and produced on demand

Records have to be retrievable years later, in the state they were filed

Partners

Access that was meant to be temporary

Forwarders, carriers and customers are given access to shares, and the project ends long before the access does

Orientation, not legal advice. NIS2 applies through national transposition, so sector scope, thresholds and deadlines differ per country — check yours.