Skip to content

Solutions / Auto dealers & repair shops

Dealership data locked down. Shop systems kept running.

If you arrange financing or leases, the FTC Safeguards Rule treats your dealership like a financial institution. Repair shops don’t face that rule, but they hold the same customer details and card payments. We cover both.

9elements
The Safeguards Rule expects in every program. We cover all of them.
MFA
Required for anyone who accesses customer information.
500people
A breach this size has to be reported to the FTC within 30 days.
20min
Is all we need from you to get started.

How it works

From first call to a program on file

Most of the work is ours. We fit around the sales floor and the service lane.

Your security program

Ready if the FTC asks
  1. Week 1

    20-minute call

    Where customer data lives: your DMS, CRM, F&I tools, email and shared drives.

  2. Week 2

    Program written

    Risk assessment and written program, with your qualified individual named.

  3. Weeks 3–4

    Controls in place

    Two-step login on every system, encrypted laptops, logging and tested backups.

  4. Every year

    Reviewed and reported

    Staff training, a refreshed risk assessment and the yearly report where it applies.

Questions from dealers

What dealers and shops ask us first

Our DMS provider handles security, right?

They secure their own system. The Safeguards Rule makes the dealership responsible for its own program, including overseeing providers like your DMS and CRM.

We’re a small lot. Does this apply?

If you arrange financing or leasing, yes. Dealers with records on fewer than 5,000 consumers are spared a few parts, like the yearly written report, but still need the program and the controls.

We’re a repair shop, not a dealer.

Then the Safeguards Rule likely doesn’t apply. Card payments still fall under PCI DSS, and your shop software, email and website are what we protect. The free outside check is the place to start.

Do you work around our busy hours?

Yes. Updates happen after hours, and anything that needs a restart is scheduled with you first.