Solutions / Auto dealers & repair shops
Dealership data locked down. Shop systems kept running.
If you arrange financing or leases, the FTC Safeguards Rule treats your dealership like a financial institution. Repair shops don’t face that rule, but they hold the same customer details and card payments. We cover both.
- 9elements
- The Safeguards Rule expects in every program. We cover all of them.
- MFA
- Required for anyone who accesses customer information.
- 500people
- A breach this size has to be reported to the FTC within 30 days.
- 20min
- Is all we need from you to get started.
How it works
From first call to a program on file
Most of the work is ours. We fit around the sales floor and the service lane.
Your security program
Ready if the FTC asksWeek 1
20-minute call
Where customer data lives: your DMS, CRM, F&I tools, email and shared drives.
Week 2
Program written
Risk assessment and written program, with your qualified individual named.
Weeks 3–4
Controls in place
Two-step login on every system, encrypted laptops, logging and tested backups.
Every year
Reviewed and reported
Staff training, a refreshed risk assessment and the yearly report where it applies.
Questions from dealers
What dealers and shops ask us first
Our DMS provider handles security, right?
They secure their own system. The Safeguards Rule makes the dealership responsible for its own program, including overseeing providers like your DMS and CRM.
We’re a small lot. Does this apply?
If you arrange financing or leasing, yes. Dealers with records on fewer than 5,000 consumers are spared a few parts, like the yearly written report, but still need the program and the controls.
We’re a repair shop, not a dealer.
Then the Safeguards Rule likely doesn’t apply. Card payments still fall under PCI DSS, and your shop software, email and website are what we protect. The free outside check is the place to start.
Do you work around our busy hours?
Yes. Updates happen after hours, and anything that needs a restart is scheduled with you first.
Other businesses we look after
- Tax preparers & CPA firmsFTC Safeguards Rule
- Medical & dental practicesHIPAA Security Rule
- Contractors & home servicesWebsite leads and payment fraud
- Manufacturers & distributorsRansomware and supplier requirements
- Retail shopsPCI DSS for card payments
- Restaurants & cafésPCI DSS for card payments
- Consultants & agenciesClient security questionnaires
- Salons, spas & gymsBooking and payment data
- Nonprofits, schools & childcareDonor, family and student data
- Real estateWire fraud at closing
- Law firmsDuty of client confidentiality
- Financial & insurance officesFTC Safeguards Rule and state insurance laws