flexport-data-handling

# Flexport Data Handling ## Overview Flexport logistics data encompasses shipment records, bills of lading, customs declarations, commercial invoices, tracking events, and trade compliance documents. This data crosses international borders and regulatory jurisdictions, requiring strict handling for PII (shipper/consignee contacts), controlled export data (HS codes, ITAR items), and financial records (invoices, duty payments). All integrations must enforce GDPR/CCPA compliance, customs data retention mandates, and C-TPAT supply chain security standards. ## Data Classification | Data Type | Sensitivity | Retention | Encryption | |-----------|-------------|-----------|------------| | Shipment records | Medium | 1 year post-delivery | AES-256 at rest | | Customs declarations | High (trade compliance) | 5 years (CBP requirement) | AES-256 + TLS | | Commercial invoices | High (financial) | 7 years (tax/audit) | AES-256 at rest | | Contact PII (shipper/consignee) | High | Until deletion request | Field-level encryption | | Tracking events | Low | 90 days | TLS in transit | ## Data Import ```typescript interface FlexportShipment { id: string; ref: string; status: string; shipper: { name: string; email: string; address: string }; consignee: { name: string; email: string; address: string }; hsCode: string; incoterm: string; cargoReadyDate: string; } async function importShipments(cursor?: string): Promise<FlexportShipment[]> { const allShipments: FlexportShipment[] = [...