How Desk2Deal protects your dealership's data: layered encryption, strict multi-tenant isolation, hardened authentication, granular permissions, audit trails, and encrypted nightly backups — with full data export on every plan so your data is always yours.
On certifications, we say it plainly: formal third-party certifications are on our roadmap — and we'll publish them here when earned. We'd rather show you the architecture than claim a badge we haven't finished auditing for.
Key Features & Benefits
- In transit — TLS 1.2/1.3 — Every connection is encrypted end-to-end with modern TLS and HSTS enforced. Certificates are auto-renewed; no traffic ever travels in the clear.
- At rest — KMS + Vault — Files are stored with server-side encryption using KMS-managed master keys. HashiCorp Vault manages the encryption keys separately from the data they protect.
- Application — field-level encryption — Sensitive fields are encrypted with Vault-managed keys at the application layer — protected before they're ever written to the database.
- Complete company isolation — Multi-tenant by design. Every database query is automatically scoped to your company, and storage uses per-company encrypted buckets. No cross-tenant access — ever.
- Hardened authentication — MFA via SMS and authenticator apps, session device-fingerprinting, and rate limiting to stop brute-force and session hijacking.
- Granular permissions — Hundreds of role-based permissions let you control exactly what each user can view and do — down to individual features and actions.
- Audit trails — Sensitive operations are logged with who, what, and when — so you have an accountable record across deals, documents, and user activity.
- Your data, portable — Full CSV/JSON export on every plan. Your deals, customers, and inventory are always yours to take with you — no lock-in, no ransom.
- Backups & recovery — Nightly encrypted backups with KMS-managed keys. If we ever shut down, you receive a self-hosted Docker image of your full installation.
Frequently Asked Questions
Is Desk2Deal SOC 2 or ISO certified?
Not yet — and we won't claim it until it's true. Formal third-party certifications are on our roadmap, and we'll publish them on this page when earned. In the meantime, this page documents the actual security architecture: layered encryption, tenant isolation, MFA, granular permissions, and audit logging.
Can one dealership see another dealership's data?
No. Desk2Deal is multi-tenant by design: every database query is automatically scoped to your company and file storage uses per-company encrypted buckets. Cross-tenant access is blocked at the architecture level.
Can I export my data?
Yes — full CSV/JSON export on every plan, any time. Your deals, customers, and inventory are always yours to take with you.