LevelsDEALER OS

SECURITY

Security and data protection

What protects dealership and customer data in Levels Dealer OS — each point as the Privacy Policy and the Terms of Service state it, and as the code does it. No system is perfectly secure, and Levels does not claim otherwise.

Every module is $29 a month, everything is $299 — 14 days free on each module with code #LevelUP. See the pricing →

Start free with #LevelUP →

In transit and at rest

  • HTTPS everywhere

    Every connection to Levels and to dealer websites uses HTTPS, with certificates that renew automatically.

  • The most sensitive fields are encrypted

    Social Security numbers, driver's license numbers and the credentials of connected services are encrypted in the database with a key kept outside it. Raw credit-bureau responses are encrypted with AES-256-GCM before they are stored.

  • What is not separately encrypted

    The normalized credit report — score, factors and tradelines — is protected by access levels and audit logging rather than encryption.

Each dealership kept apart

  • Enforced by the database

    Every dealership's records carry its ID, and the database enforces that boundary on every query. No dealership can see another's customers, leads, deals, documents, messages, credit data, books or settings.

Who can see what

  • Roles and credit access

    Owners set each person's role and credit-access level. Opening a raw credit file takes the highest level and a PIN.

  • Passwords and PINs

    Stored only as one-way hashes. A staff sign-in lasts 12 hours, or with "Keep me signed in" up to 14 days without use and 30 days at most.

  • Levels' own support access

    When Levels support opens a dealership's account, the session is written to an audit log, lasts no more than an hour, and shows a banner inside the account.

A record of sensitive actions

  • Append-only audit logs

    Sensitive actions are written to append-only logs, each keeping its own record. Credit views and Social Security and license-number reveals: who, with their role and credit-access level, what was opened, when, the IP address and the browser. Each signing step: who, when, in person or remote, the IP address and the browser. Levels support access: which Levels operator, what they did, when, the IP address and the browser. Price changes: the old and new price, when, and who made the change or which system path did. Tax exports: what was exported, when, by whom, and a fingerprint of the file.

  • Signing evidence

    Each signing step is recorded with its time, channel, IP address and browser, and the signed packet ends with a certificate listing the evidence and each document's fingerprint.

  • Clean application logs

    Social Security numbers, credit files, passwords and request bodies are not written to application logs, and error messages never show database details.

Files and payments

  • Private files stay private

    License images, receipts, uploaded customer documents and private vehicle documents are served only to signed-in staff or through short-lived signed links.

  • …and the files that are not, yet

    Some documents — deal documents imported from a prior system and signed consignment agreements among them — are stored at long, unguessable addresses rather than behind a sign-in. Vehicle photos and blank forms are public by design.

  • Card details never touch Levels

    Card numbers are typed on Stripe's own page and go straight to Stripe; Levels never receives or stores them.

  • Scans read on the device

    License barcodes, license photos, VIN scans and receipt photos are read on the device or on Levels' own server, not by a cloud scanning vendor.

Hosting and backups

  • Hosted in the United States

    The application, the database, uploaded files and backups are on Amazon Web Services in the United States.

  • Daily backups

    A full copy of the database is made once a day and stored in Amazon S3 server-side encrypted; the database host keeps its own snapshots for 14 days.

Reporting a problem

  • Tell us

    If you believe a login, PIN or device has been compromised, write to admin@levels.dealer right away. What Levels does after a security incident is set out in the Terms of Service, section 10.11.

READ NEXT