Cartel.my provides dealerships with a secure and dependable platform, giving your team confidence that your data and processes are protected.
Secure Authentication
Passwords are hashed using bcrypt, and all requests to the database are restricted to our domain. We cannot view your passwords or access your account, ensuring your login credentials remain private.
Encryption
All customer data and traffic are encrypted using TLS 1.3 in transit and AES-256 at rest. Sensitive information is protected according to industry best practices, and secrets are managed through secure cloud provider infrastructure.
Application Security
All API endpoints enforce strict least-privilege access controls, ensuring users can only perform actions within their permissions. Requests are validated against registered accounts, preventing unauthorized access to the Platform.
Role-based Access Control
Agents have access only to specific features and data relevant to their role. Agent access can be easily revoked, keeping your data safe when team members leave.
Continuous Security Review
Our in-house cybersecurity expert advises on security best practices and conducts regular audits. We stay up to date with the latest threats and implement necessary measures to protect our platform and your data.
Daily Backups
Customer data is backed up daily and retained for up to 7 days. Backups are stored securely in our cloud provider infrastructure, with point-in-time recovery available through Supabase.
Questions About Our Security?
Contact our cybersecurity team for more information