SECURITY & DATA OWNERSHIP

Your data is yours. We just keep it locked down.

Auto Expert runs your entire store, so how we hold your data matters. The short version: it's your dealership's data, not ours — you can export it or walk away anytime — and it lives on encrypted, independently-audited infrastructure with multi-factor access on every account.

SOC 2 Type IIComing soon
Independent audit of our security controls — in progress.
ISO 27001Coming soon
Information-security management standard — on our roadmap.
FTC Safeguards
GLBA rule for customer financial data.
MFA enforced
Multi-factor login on every account.
Encryption
In transit and at rest, by default.

Auto Expert is fully compliant with the FTC Safeguards Rule (GLBA) — the federal standard for how dealerships protect customer financial data.

Read our legal documents →

Your data belongs to you. Full stop.

We're the custodian of your records — never the owner. Everything Auto Expert stores about your dealership is yours to take, anytime.

You own every record

Customers, repair orders, deals, history — it's your dealership's data. We're the custodian, never the owner, and we treat it that way.

Export anytime, for free

One request pulls your full dataset in standard formats. No gatekeeping, no exit fee, no “call sales to find out.”

No five-year lock-in

We earn the renewal every month. If we ever stop earning it, your data leaves with you — no penalty, no hostage situation.

How we keep it safe

Security isn't a feature we bolted on at the end. It's built into every layer — the database, the login, the backups, and our own access.

Encryption everywhere

Encrypted in transit over TLS and at rest in the database. Your data is unreadable to anyone without keyed access.

MFA on every account

Multi-factor authentication is enforced for every user — advisors, managers, and admins alike. No exceptions.

Role-based access

Row-level security and granular roles mean an advisor sees advisor data — not the GM's books or another store's numbers.

Continuous backups & failover

Point-in-time backups and automatic failover keep you running. After 2024, “back to pen and paper” isn't acceptable.

Full audit logging

Every sensitive action is logged — who touched what, and when. Nothing happens in the dark, and you can review it.

Least-privilege access

Our team can't browse your data. Access is scoped, time-bound, and logged — granted only when you ask us for support.

THE FOUNDATION

Built on infrastructure that's audited for you.

Auto Expert runs on Supabase — managed PostgreSQL on enterprise cloud infrastructure. Your data sits on a platform with independent security audits, database-level access controls, and encryption by default. We didn't build a database from scratch and hope it holds; we stand on a foundation a solo bolt-on vendor can't match.

Managed PostgreSQL with row-level security
Encryption at rest and in transit, by default
Independently audited cloud infrastructure
Each dealership's data isolated from the next
Managed PostgreSQL
Row-level security at the data layer
Encrypted by default
In transit (TLS) and at rest
Isolated per dealer
Your store's data stays your store's
OUR PROMISE

What we'll never do with your data.

Sell or share your dealership's data with third parties.
Train public AI models on your customers or your numbers.
Hold your records hostage or charge you to leave.
Lock you into a multi-year contract to keep your own data.

Have a security question?

Bode answers them personally — including the hard ones about export, downtime, and where your data lives. Ask before you ever sign.

Email Bode → Become a founding dealer