Every funding decision in PreCheck comes with the evidence behind it, kept in one place and ready for credit committee, internal audit or a regulator.
What’s recorded on every asset
- Who submitted the request, from which dealership, and when
- The vehicle lookup, finance check and valuation results at the time of the request
- Every rule the request was tested against, and whether it passed
- Every document uploaded, what was read from it, and the confidence score for each field
- Every manual correction, with who made it
- Who approved, rejected or escalated it, and when
- Funding, settlement and closure dates
The record can’t be edited after the fact. A correction is saved as a new entry, not an overwrite.
Why this matters to a funder
When a dealer fails, the first questions are always the same. What did we fund, on what evidence, and who signed it off? With PreCheck the answer is one search, not a week of digging through inboxes.
Data security
Certified to ISO 9001 and ISO 27001. Here’s what sits behind that.
Where your data lives
- Hosted on Microsoft Azure in Ireland, with failover to a second EU data centre in the Netherlands
- Our EU and US platforms are separate deployments. EU customer data stays in the EU and never crosses between them
- Data is encrypted at rest with AES-256, in the database and in file storage
- Each funder’s data is kept separate from every other funder’s. A dedicated single-tenant environment is available on request
Who can get to it
- Sign-in runs on Microsoft’s identity platform (Azure AD B2C), and access tokens expire after an hour
- Separate logins for funders and dealers, with role-based access so each user sees only what their role allows
- Strong password rules and email verification for password resets
- Every API call passes through a managed gateway that checks the access token and limits request rates
- Encryption keys and secrets are held in Azure Key Vault. Customer-managed keys are available
- Our own staff use multi-factor authentication on compliant devices, and privileged access is granted only for the time it’s needed
How we watch it
- Microsoft Defender for Cloud scans for vulnerabilities and flags unusual activity and brute-force attempts
- The live service is continuously monitored, with automatic alerts on errors and performance
- Personal data on uploaded documents, such as owner names and addresses, is identified when the document is read
More detail in the FAQ.