Security

The safeguards in place on the IgniteUps platform, in plain words. Each line below is checked against the live platform when this page is opened, so it only lists what is in place right now.

Checked: October 17, 2026, 22:51 UTC

Encryption

• ✓Everything is encrypted in transit (HTTPS, TLS 1.2 or newer).
• ✓The database and its logs are encrypted at rest.
• ✓Backup copies are encrypted before they leave our servers, and are kept for 7 days only.
• ✓Files a dealership uploads to our assistant are encrypted with a key that belongs to that dealership alone. The key is destroyed when the dealership leaves, so no copy can be opened afterwards.

Customer data and AI

• ✓Before an AI model writes or reads a text, email or website-chat message, the customer's name, phone number, email address, street address, VIN, stock number and finance figures are swapped for placeholders. The real values are put back on our own servers.
• ✓We do not allow the AI providers we use to train their models on the data we send them.
• ✓Each dealership's data is walled off: every question, report and message runs inside that dealership's own stores, and no other dealership can see it.
• ✓Every opt-in and opt-out we can evidence is written to an append-only, tamper-evident consent ledger, with the exact wording and the proof behind it.

Retention and deletion

• ✓Assistant conversations and uploaded files are deleted automatically after 90 days.
• ✓When a dealership leaves, 30 days after its last day its customer records, conversations and call recordings are deleted, and it receives a certificate of deletion.

Accounts and access

• ✓New users sign in through a time-limited invite link. We never email a password.
• ✓Password resets use single-use links that expire, and a reset signs out every other session.
• ✓Accounts unused for 90 days are disabled automatically.
• ✓Access is limited by role and by store, and admin rights are dropped while a support person views a dealership's account.

Monitoring and integrity

• ✓Changes to records are written to a hash-chained audit log that is verified every night, so an edited or deleted entry is caught.
• ✓Passwords and keys are kept out of our logs, by redaction at the source and by a scrubber that checks every log file every five minutes.
• ✓If a security incident affects personal information we hold, we notify the affected dealership, and any individuals or authorities the law requires.