Dealers entrust us with credit applications, SSNs, customer payment data, and the live phone line. That trust is the moat. Here's how we earn it.
Every tenant-scoped table enforces tenant_id at the database layer. Our application connects as a non-superuser role that cannot bypass RLS. Cross-tenant access requires defeating four independent layers — and is blocked by automated tests.
1Password CLI in dev. systemd EnvironmentFile (chmod 0600) in production. Quarterly rotation, immediate rotation on personnel change. Zero secrets in git, ever — gitleaks scans every push.
TLS 1.2+ everywhere. HSTS preload-eligible. nonce-based Content-Security-Policy. Frame-ancestors none. Cookies HttpOnly + Secure + SameSite=Lax. CSRF tokens on every form.
A PII scrubber masks email, phone, SSN, DOB, and credit-card patterns from logs and Sentry events. Call transcripts retained 60 days, recordings 30 days, audit log 7 years.
Every inbound webhook (Stripe, Twilio, Vapi) verifies the provider signature before parsing the body. Constant-time compare. Idempotent handlers replay-protected via Redis.
SOC 2 Type 1 evidence collection in flight; report by Q3 2026. GLBA Safeguards rule controls in place. TCPA-compliant outbound calling: time-of-day rules, opt-out enforcement, recording disclosure on inbound.
Email us with reproduction steps. We respond within 48 hours and credit responsible disclosures publicly with your permission.