Security at DealerRock
Security at DealerRock
DealerRock runs on Microsoft Azure and uses modern controls for data protection, access, monitoring and software operations.
Hosting
Microsoft Azure
Access
Browser-based, no VPN
Encryption
In transit and at rest
Permissions
Role-based, per location
Cloud infrastructure
Built on Microsoft Azure
DealerRock runs on Microsoft Azure rather than servers in your dealership. There is no on-premise DMS box to patch, back up, or replace, and no VPN required for your staff to reach their own data.
- Managed cloud hostingInfrastructure is operated on Azure, with platform maintenance handled by DealerRock rather than your IT provider.
- Browser-based accessStaff work in a browser on desktop, laptop, tablet, or phone. Nothing to install or maintain on workstations.
- Reduced local footprintRemoving the dealership server removes an entire category of hardware failure, backup, and upgrade risk.
Data protection
Data protection
Customer records, deal documentation, and financial data are dealership assets. They are encrypted moving between your browser and DealerRock, and encrypted where they are stored.
- Encryption in transitAll traffic between users and DealerRock is served over HTTPS.
- Encryption at restStored data is encrypted in the hosting platform.
- Payment data handlingCard data is handled through supported payment processors rather than stored in the DMS.
Authentication & access
Access controlled by role and location
Access control is not an afterthought in a multi-location dealership. Roles are defined centrally and applied per location, so a service writer at one store does not inherit administrative rights across the group.
- Role-based permissionsAccess is granted by role and applied to the locations a user works in.
- Location-scoped accessUsers see the stores relevant to them; group leadership sees across them.
- Account administrationDealership administrators manage their own users, roles, and access changes.
Monitoring
Monitoring across the platform
Application, error, and infrastructure monitoring run continuously so issues surface to the team that can fix them.
- Application monitoringPerformance and availability are monitored across the platform.
- Error monitoringErrors are captured and triaged rather than waiting on a support ticket.
- Infrastructure monitoringHosting platform health is monitored on an ongoing basis.
Development practices
Development and change control
Shipping improvements every month only works if the process around those changes is disciplined.
- Code reviewChanges are reviewed before they reach production.
- Change controlReleases follow a defined process rather than ad-hoc deployment.
- Dependency managementThird-party dependencies are tracked and updated.
Backups & resilience
Backups & recovery
One of the quiet costs of a server-based DMS is that backup is somebody at the dealership remembering to check. On DealerRock it is part of the platform.
- Encrypted backupsData is backed up as part of the hosted platform.
- Recovery practicesRestore procedures are maintained by DealerRock.
Compliance
SOC 2 Type II
DealerRock is completing its SOC 2 Type II program as part of our continued investment in the controls and operating discipline larger dealership organizations expect.
Security teams evaluating DealerRock can request current compliance documentation and a security overview through the contact below.
Security contact
Request security documentation
If your organization requires a security review, questionnaire response, or documentation package as part of evaluating DealerRock, contact us and we will route your request to the right people.
See also: Privacy Policy ·Terms ·Messaging Terms
Bring your security team.
Let us answer the hard infrastructure and access questions during evaluation rather than after you sign.