How Desk2Deal protects your dealership's data: TLS and per-company encryption, strict multi-tenant isolation, hardened authentication, granular permissions, audit trails, and nightly backups — with full data export on every plan so your data is always yours.
On certifications, we say it plainly: formal third-party certifications are on our roadmap — and we'll publish them here when earned. We'd rather show you the architecture than claim a badge we haven't finished auditing for.
Key Features & Benefits
- In transit — TLS 1.2/1.3 — Every connection to Desk2Deal uses modern TLS, with HSTS enforced. Certificates renew automatically.
- Documents — per-company keys — Deal documents, templates and signatures are encrypted with AES-256-GCM before they are stored, using a separate key for each company. HashiCorp Vault keeps the keys apart from the data they protect.
- Sensitive fields — application layer — Sensitive customer data, such as contact details, driver's license and Social Security numbers, is encrypted with your company's key before it is written to the database.
- Complete company isolation — Multi-tenant by design. Every database query is automatically scoped to your company, and each company's files live in their own storage bucket. No cross-tenant access — ever.
- Hardened authentication — MFA via SMS and authenticator apps, session device-fingerprinting, and rate limiting to stop brute-force and session hijacking.
- Granular permissions — Hundreds of role-based permissions let you control exactly what each user can view and do — down to individual features and actions.
- Audit trails — Sensitive operations are logged with who, what, and when — so you have an accountable record across deals, documents, and user activity.
- Your data, portable — Full CSV/JSON export on every plan. Your deals, customers, and inventory are always yours to take with you — no lock-in, no ransom.
- Backups & recovery — Nightly backups. If we ever shut down, you receive a self-hosted Docker image of your full installation.
Frequently Asked Questions
Is Desk2Deal SOC 2 or ISO certified?
Not yet — and we won't claim it until it's true. Formal third-party certifications are on our roadmap, and we'll publish them on this page when earned. In the meantime, this page documents the actual security architecture: layered encryption, tenant isolation, MFA, granular permissions, and audit logging.
Can one dealership see another dealership's data?
No. Desk2Deal is multi-tenant by design: every database query is automatically scoped to your company and each company's files live in their own storage bucket. Cross-tenant access is blocked at the architecture level.
Can I export my data?
Yes — full CSV/JSON export on every plan, any time. Your deals, customers, and inventory are always yours to take with you.