Security & data

Your deals. Your data. Your rules.

F&I runs on your customers' most sensitive information. Here is how we're building aimlark to handle it. We'll walk your team through every detail on a call.

Our commitment

Your data stays yours

Customer and deal data belongs to your store. We don't sell it, and we don't use one store's data to serve another.

Our commitment

Least access

Each agent sees only what its job on the deal needs. A follow-up agent never sees a credit application.

Our commitment

Every action logged

What each agent read, what it suggested, which rule it cited, who approved it, and when.

Our commitment

Encrypted

Data is encrypted in transit and at rest.

Our commitment

Your limits, enforced

Agents can't act outside the markup, term, advance and product limits you set. Anything outside goes to a manager.

Our commitment

One switch to pause

Pause any agent, or all of them, at any time. Your team takes it from there.

Who sees what

Access by role, set by you.

WhoSeesCan approve
Dealer principal, GMEverything, plus the full audit logLimits, rules and which agents are on
F&I managersTheir deals, lender decisions, stips, menusCallbacks, menus, stip requests
Sales managersTheir deals and desk structuresStructures they present
aimlark agentsOnly the data each job needsOnly what your limits allow
aimlark teamSupport access only with your permission, loggedNothing on your deals
FTC Safeguards Rule

Built to fit your Safeguards program.

Dealers handle customer financial information, so your store runs an information security program. aimlark is being built to support it: access controls, logging and oversight you can document.

Not legal advice. Your compliance team and counsel own your Safeguards program.

  • Access controls.Role-based access, set by your store.
  • Logging.A record of every agent action and every approval.
  • Vendor oversight.We'll answer your security questionnaire and walk your team through how we work.
  • Data requests.A copy or deletion of your store's data on request, apart from records you're required to keep.
Questions

What your security review will ask.

Where is our data stored?

We'll walk through hosting, data location and retention on a call, and put it in writing before a pilot starts.

Do you train AI models on our data?

Your store's data is never used to serve another store. We'll put our model and data-use terms in writing before a pilot, including how any AI provider handles your data.

How do agents access Dealertrack, RouteOne or CUDL?

Today the agents work from the screens and exports your team already uses. We'll set up access with you so it fits your store's rules and each platform's terms of use. Direct connections are on our roadmap.

Can we get our data back or have it deleted?

Yes. We'll return or delete your store's data on request, apart from records you're required to keep, and confirm it in writing.

Security review

Bring us your hardest questions.

We'll go through them with your team on a free estimate call.

Get my free estimate