When a dealer disputes a finding, or a loss goes to credit committee, internal audit or a regulator, you can show exactly what was seen, where and when. Auditor keeps that record for every vehicle on every check.
The audit trail
What’s recorded on every vehicle
- The VIN, read from the photo
- The live photo itself
- Its GPS location and distance from the dealer’s site
- The date and time
- Who checked the vehicle
- The result of each automated check, and the reason for any failure
- Any exception, and how it was closed
- VIN…8779 · read from photo
- LocationOn site, by GPS
- Captured07 Nov · 10:42
- Checked byDealer staff
- Automated checksAll passed
- Funded bookMatched
Why this matters to a funder
A photo with a location, a time and proof it was taken live is evidence. A photo without them is a claim. The difference shows the day a dealer says the car was there.
Data security
How your data is protected
Certified
ISO 27001 and ISO 9001 certified.
Hosted in the EU
Microsoft Azure in Ireland, with failover to the Netherlands. EU and US platforms are separate.
Kept apart
Your data is kept apart from every other funder’s, and a single-tenant option is available.
Encrypted
Data is encrypted in transit and at rest.
Platform security
The same controls across Auditor, PreCheck and FunderConnect
Where your data lives
- Microsoft Azure in Ireland, with failover to a second EU data centre in the Netherlands
- EU and US platforms are separate deployments
- Encrypted in transit, and at rest with AES-256 in the database and file storage
- Each funder’s data is kept apart from every other funder’s. A dedicated single-tenant environment is available on request
Who can get to it
- Sign-in on Microsoft’s identity platform (Azure AD B2C), with access tokens that expire after an hour
- Separate funder and dealer logins, with role-based access
- Every API call passes through a managed gateway that checks the token and limits request rates
- Keys and secrets held in Azure Key Vault. Customer-managed keys are available
- Our staff use multi-factor authentication on compliant devices, with privileged access granted only for the time it’s needed
How we watch it
- Microsoft Defender for Cloud scans for vulnerabilities and flags unusual activity and brute-force attempts
- The live service is monitored continuously, with automatic alerts on errors and performance
Certified by Alcumus ISOQAR, a UKAS-accredited body: ISO 27001:2022, certificate 21261-ISMS-001, and ISO 9001:2015, certificate 21261-QMS-001. Both cover the provision of SaaS for stock management and inventory intelligence tools, and run to 28 July 2028.
Request our security pack
Certificates, a summary of our security controls, where your data is held and answers to your own security questionnaire.