Security
We take security seriously. Here's how we protect your dealership data.
Encryption
All data is encrypted in transit (TLS 1.3) and at rest. Facebook credentials are encrypted with AES-256 before storage.
Access Control
Database-level row-level security (RLS) ensures tenant data isolation. Each dealership sees only its own data.
Infrastructure
Hosted on secure, access-controlled servers with firewalls and intrusion detection. Regular security patches applied automatically.
Backups
Daily automated backups with 14-day retention. Encrypted backup storage with off-site replication for disaster recovery.
Authentication
JWT-based session management with secure, httpOnly cookies. Password hashing via bcryptjs. Email verification required for all accounts.
Compliance
Privacy policy, terms of service, and data processing agreements available. Self-service data export and account deletion for GDPR/CCPA compliance.
Report a Security Issue
If you discover a security vulnerability, please email us immediately at security@autobodytree.com. We follow a responsible disclosure process and will respond within 48 hours.