Dealer data security, built into the platform

By the database itself, not only by careful code. Every dealership’s records sit in one database, and they carry a rule there that hands them only to people signed in to that dealership. The app connects with a database login that is not allowed to skip that rule, so a request that is not tied to your dealership gets nothing back rather than another dealer’s records. The technical name for this is row level security.

Each customer’s date of birth and driver’s license number are encrypted with AES-256-GCM before they are saved, and so are your dealership’s EIN and the answers a shopper gives on a website lead form. The authenticator secrets behind two-factor sign-in and the keys to your bank and QuickBooks connections are encrypted too, and passwords are kept only as a one-way hash. This is encryption of the most sensitive fields, not of every column. Traffic between your browser and the app is encrypted on the way.

There are four fixed roles and no custom ones. Owner can do everything. Admin / Manager runs the store, except a few things that are the owner’s alone, such as billing, the bank and QuickBooks connections, the assistant’s Autopilot setting and other people’s roles. Sales works the cars, leads and deals, without the books, loans or floor plan. Accounting works the money and reads inventory and deals without selling. If your team needs finer control than four roles give, that is a limit today.

Yes, and that is how it starts. Salespeople see the asking price and the floor price, and not the acquisition cost, the costs on a car, the margin or the gross, until an owner turns on Salespeople see cost and profit under Settings, Team. Owners, admin managers and accounting always see them. The figures are left out on the server, so reports, the assistant, Telegram and connected apps leave them out too.

It supports it, and each person turns it on for themselves under Settings, Sign-in and security, with any authenticator app. After that every sign-in asks for a six-digit code from the app, Continue with Google included, and ten single-use recovery codes cover a lost phone. Codes never come by text message. An owner cannot require two-factor for the team today, so ask each person to turn it on.

Yes, if you are an owner or an admin manager. The audit log under Settings shows the recorded changes newest first, with when, who, the action, the record and what changed, and each record has a history of its own. There is no download button today: for a copy of the log, or an export of your dealership’s records for a data request, our team produces it for you on request. We are not a law firm, and how you answer a data request stays your responsibility.

When someone leaves, an owner or admin manager deactivates them under Settings, Team. They are signed out everywhere and cannot sign in, their Telegram chat and any AI app they connected stop working, and everything they changed stays in the audit log under their name. If a phone or laptop goes missing, Sign out everywhere under Settings, Sign-in and security ends that person’s sessions on every device, and a device that was already open goes to the sign-in page the next time it loads anything. With two-factor on, a password alone does not get anyone back in.

No. The assistant works inside the signed-in person’s role: it only offers what that role may do, checks the role again before a change is applied, and leaves cost and profit out for someone who does not see them. Every change it prepares waits for a person’s approval unless the owner’s Autopilot setting covers that routine job, and money and anything that cannot be undone always wait for a person. An AI app someone connects reads with that person’s role and at most prepares a change for approval. Bank connections go through Plaid and only bring transactions in: nothing can be paid or moved from here.

No software makes a dealership compliant with the FTC Safeguards Rule on its own. The rule asks you for a Qualified Individual, a written information security program, a risk assessment and staff training, among other things, and the controls here are tools for that program, not the program itself. We hold no SOC 2 report and offer no SAML single sign-on or SCIM today; Continue with Google is the single sign-on there is. This is not dealership cybersecurity either: your computers, email accounts and network stay with you and your IT provider. We do not give legal advice.