Freight forwarding is a documentation business rather than a warehouse one. The IT that matters is the forwarding system staying available, reliable access to customs and trade portals, document retention you can actually produce from, and secure working with an agent network abroad. Listonics builds that at a fixed scope from AED 2,500 to AED 30,000 depending on requirement.
The forwarding system is the business
A forwarder's operating system, whether that is a major platform or something smaller, holds the jobs, the rates, the costings and the documents. When it is unavailable nothing else matters: quotes cannot go out, jobs cannot be created, and invoices cannot be raised. Unlike a warehouse, where goods can be moved on paper for a few hours, a forwarding office genuinely stops.
That makes availability the first design question rather than an afterthought. If the system is hosted by the vendor, your dependency is the internet connection, which means a second line on a genuinely different route and automatic failover. If it runs on a server in your office, the dependency is that server, which means monitoring, power protection and a restore you have tested. Our freight forwarding software IT guide covers what to ask a vendor before committing either way.
Portals you do not control but cannot work without
Clearing cargo in Dubai means working through systems that belong to other people. Dubai Trade is the single window for most transactions, Dubai Customs sits behind it, and air cargo increasingly runs on the electronic documentation standards maintained by IATA. Each has its own login model, its own session behaviour and its own occasional outage.
Two practical problems follow. First, these portals are frequently accessed with shared credentials, because that was easiest when the account was created, which means nobody can say who submitted a declaration. Second, browser and certificate requirements change, and a portal that stops working after a device update becomes an emergency when cargo is waiting.
We handle both as standing work: named accounts rather than shared ones wherever the portal allows, and a documented record of what each portal needs so a device rebuild does not become a scramble.
Documents that matter years after the job closed
A forwarding file is a legal record. Bills of lading, air waybills, customs declarations, certificates of origin, delivery orders and commercial invoices can all be called for long after the shipment moved, whether by a customs authority, an insurer, a claimant or an auditor. The World Customs Organization frames the retention expectation internationally, and the practical effect for a Dubai forwarder is that documents must be findable years later.
That is a retention and structure problem rather than a storage one. Files organised by job number, with retention set against your obligations rather than at a platform default, and a backup that has been restored from. What does not work is documents living in the mailbox of whoever handled the job, which is where they end up by default and where they become unfindable the moment that person leaves. Our cloud storage for business page covers the structure.
- One file structure per job, not per person's mailbox.
- Retention set deliberately against customs and commercial obligations.
- Access by role, so a departure does not orphan a job file.
- A backup restored and dated, because the record has legal weight.
The agent network is part of your attack surface
Forwarders work through overseas agents, and that relationship runs on email carrying payment instructions, invoices and documents. It is also the single most exploited relationship in the industry, because an attacker who compromises an agent's mailbox inherits a trusted conversation with you.
The pattern is consistent: the attacker watches a genuine thread about a genuine shipment, then sends altered bank details at the moment a payment is due. Nothing looks wrong because the thread is real and the shipment is real. Multi-factor authentication protects your side but cannot protect the agent's, which is why the control that actually works is procedural. Any change to an agent's or supplier's bank details is confirmed by telephone to a number you already hold, never a number in the email.
The CIS Critical Security Controls cover the technical baseline, and our cyber security audit tests whether it is genuinely enforced rather than nominally switched on.
Working across time zones and after hours
A vessel sails, a flight departs and a customs query arrives without reference to Dubai office hours. Forwarding staff routinely work early for Asian origins and late for European and American ones, often from home or a phone, and that pattern shapes what the IT needs to do.
Remote access should be secure and ordinary rather than exceptional: identity-based access with multi-factor authentication, not a port forwarded to an office machine because somebody needed to work from home once. Devices that leave the office should be encrypted. And support hours should cover when your people actually work, with maintenance scheduled outside them. Our remote IT support page covers how that is delivered.
Small teams, high transaction value
Many Dubai forwarders run lean: a handful of operations staff, a documentation team, accounts, and not much else, while handling shipments worth far more than the company's annual overheads. That mismatch is the sector's defining risk profile, and it shows up as key-person dependency.
One person usually holds the system knowledge and the administrator access. The mitigations are cheap and routinely deferred: administrator access separated from daily accounts and held by more than one person, credentials in a company password manager rather than a personal one, and the environment documented so nothing depends on memory.
How a forwarding engagement runs
A survey of the office, a review of which systems and portals the operation depends on, and a conversation about the agent network and how payments are verified. That produces a fixed-scope proposal covering connectivity with failover, the forwarding system's availability requirements, document structure and retention, the security baseline, secure remote working and a tested backup. Listonics projects run from AED 2,500 to AED 30,000 depending on requirement.
Support is a fixed monthly fee with response times set around when your operation actually runs rather than an office week, and everything ends with documentation you own.
Frequently asked questions
We support the infrastructure those systems run on rather than the applications themselves, which stay with the vendor. That means the connectivity, servers, workstations and backup they depend on, plus making sure a firewall or device change does not break them. Where a system is vendor-hosted, our job is the connection and the devices.
Yes, on two counts. Nobody can say who submitted a particular declaration, which matters if one is questioned, and a departing employee retains access until somebody changes the password for everybody. Use named accounts wherever the portal supports them, and record which portals do not so the risk is at least known.
Long enough to satisfy customs, commercial and insurance obligations, which typically runs to years rather than months and is a question for your compliance advisers. The IT point is that platform defaults are usually far shorter, so retention has to be set deliberately, and the documents must be findable by job rather than buried in someone's mailbox.
By telephone, to a number you already hold from a previous relationship rather than a number in the email. This is the most exploited pattern in freight forwarding, because the attacker is sitting inside a genuine thread about a genuine shipment. Your own multi-factor authentication cannot protect you from a compromise at the agent's end; the telephone call can.
Yes, and it should. Covered hours are set around when your operation actually runs, including early starts for Asian origins and late cover for western ones, with maintenance scheduled outside those windows. A fixed monthly fee with written response times means an early problem has a defined answer.
It is quoted as a fixed scope after a free survey. Listonics projects run from AED 2,500 to AED 30,000 depending on requirement, with headcount, whether your forwarding system is hosted or on site, and the number of offices moving the figure most. Support is then a fixed monthly fee with response times in the agreement.
Written by Srinivasan Ramachandran, Founder, Listonics · Last reviewed September 28, 2026