push.tt / Enterprise
Shipping now

The same secure core, wearing your industry's vocabulary

Modules add the screens, data and integrations one operation actually works with — rides, custody, calls, loads, shifts, crossings and live facility boards — on top of the channels, PTT and encryption every customer gets. The common kits ship now; vendor-specific adapters remain customer-led work.

Shipping now. Four dispatch modes ship: taxi and limo, secure delivery, emergency services and fleet. Proofs, nearest-unit offers, shifts and timeclock, typed inbound connectors, geofences, aviation, maritime and weather are implemented. Named PMS, hospital and ELD adapters are not.

What ships

One shared set of capability kits is assembled into four dispatch modes. Other industries can enable the same kits without carrying a fork of the product.

  • Taxi and limo — rides, driver groups, fares and receipts, customer links and scheduled bookings
  • Secure delivery — runs, custody, encrypted proof, verified handover codes and site crossings
  • Emergency services — a priority call board and a live unit-state board
  • Fleet and transport — loads, on-duty time, shifts, timeclock and crossings
  • Aviation, maritime and weather — live facility boards enabled by the sites an organisation manages
  • Horizontal kits — proof of delivery, first-accept nearest-unit offers, shifts and trades, and enum-only connector intake

What a module may and may not do

This is the load-bearing decision. Seven industries each inventing their own way to move data would mean seven encryption paths, and the security of the product would become the security of whichever one got the least attention.

  • May register a new message kind in the shared protocol, so every client agrees what it is before anyone sends one
  • May add screens, panes and list views, and read from your own systems
  • May not touch the crypto. A module's data is sealed by the same code path, with the same channel key, as a voice frame
  • May not introduce a new algorithm or library — X25519, HKDF-SHA256 and AES-256-GCM are the entire permitted set, on every platform
  • May not ask the server to read E2EE message or voice content. An integration that originates server-visible operational facts states that boundary explicitly and never disguises them as encrypted

That last constraint bites, so it is worth being concrete: an aviation module cannot have our servers correlate encrypted positions against a flight-data feed, because our servers cannot read the positions. Correlation happens on the device, or in your own console where the keys are. Some integrations are harder this way and a few are not possible at all — we would rather say which before a contract than after one.

How they reach you

Modules are enabled per organisation rather than compiled into everybody's app.

  • Enabled per org. A hotel does not carry a flight board it will never open
  • The core stays one codebase. Modules are layers on it, not forks of it, so a security fix reaches every industry at once
  • Composes with white label. Your branding and your industry's screens are separate switches — have either or both
  • Composes with on-premise. A module is part of the same deployment, with the same gaps documented on that page

What gets added next

The reusable product layer is built. The next work is a named adapter or preset, chosen by a real operation and the system it already uses — not by adding a vague industry tile.

  • What your people do when the network drops for twenty minutes
  • Which system already holds the data the module would show
  • Whether dispatch and the field need different screens or the same one
  • What currently gets said on the radio that should not have to be

Bring us the system and the shift

Name the PMS, ELD, hospital interface or dispatch workflow already in place. We will say which shipped kit fits, what adapter is missing, and whether the encryption boundary makes any requested part impossible.