What about client confidentiality?

Client confidentiality is enforced at three layers: contractual, architectural, and operational.

Contractual protections:

• The Broker Partnership Agreement explicitly bars Tariffi from initiating customs-brokerage services with any importer you referred.
• Tariffi commits to referring any inbound customs-brokerage inquiries from your clients back to you.
• Standard NDA provisions cover all client data shared through the platform.

Architectural protections:

• Tenant isolation at the database layer. Each broker partner operates in a separate database tenant. Your queries only return data associated with your Filer Code — there is no "all brokers" view accessible to any partner.
• Role-scoped access. Database access is restricted by role. Broker accounts can only access entries assigned to their filer code. Even Tariffi's internal admin tools enforce broker-tenant boundaries in every query.
• Audit logging. Every data access event is logged per 19 CFR Part 163 retention requirements (7 years). If you ever need to verify that your client data was not accessed by unauthorized parties, the audit trail is available.

Operational protections:

• Tariffi's support team cannot access your tenant data without a logged, reason-attributed support request.
• No client data is used for marketing, aggregated analytics, or cross-selling to other broker partners.
• Data retention follows 19 CFR Part 163 requirements — 7 years from the date of the relevant entry, then purged.

What other brokers see: Nothing. Other broker partners on the platform have zero visibility into your client list, your filing volume, your fee arrangements, or any data associated with your Filer Code. The isolation is not just access-control — it is structural. Each tenant's data lives in separate database rows with enforced foreign-key constraints that prevent cross-tenant joins.