Your data belongs to you
MOTIV acts as a custodian of dealership records. Your dealership directs how its customer information is processed.
SECURITY & DATA OWNERSHIP
Your records.
Your rules.
Here is exactly how MOTIV protects a dealership’s records, mapped line by line to the FTC Safeguards Rule your store already answers to.
01 / THE SAFEGUARDS RULE
Built for the Safeguards Rule.Our part and yours.
The FTC Safeguards Rule (16 CFR Part 314) asks every dealership that handles customer financial information to run a written security program. Here is what it asks, what MOTIV covers and what stays with your store.
| The rule asks | MOTIV’s part | Your part |
|---|---|---|
| Limit who sees customer information§ 314.4(c)(1) | A role for every seat, each seeing only what the job needs. Row-level security on every table enforces it in the database, not the browser. | Put each person in the right role. Remove access the day someone leaves. |
| Encrypt customer information§ 314.4(c)(3) | TLS on every connection. Encryption at rest in the database. | Keep customer records in MOTIV, not in spreadsheets and email attachments. |
| Log what authorized users do§ 314.4(c)(8) | An activity log records who changed what, and when. | Review it. Ask about anything you don’t recognize. |
| Oversee your service providers§ 314.4(f) | We answer your vendor security questionnaire in writing. Our data processing addendum and sub-processor list are available on request. | Keep our answers in your vendor file. Review them each year. |
| Respond to security events§ 314.4(h) | We tell you without undue delay, and within 72 hours of becoming aware of a confirmed incident that affects your data. | Name who we call. Keep your written response plan current. |
STAYS WITH YOUR STORE
- A Qualified Individual who runs your program§ 314.4(a)
- A written risk assessment§ 314.4(b)
- Security training for your staff§ 314.4(e)
- A yearly report to your owner or board§ 314.4(i)
- FTC notice within 30 days of an event affecting 500 or more customers§ 314.4(j)
No software makes you compliant. MOTIV gives you the controls and the evidence. This is a plain summary of the rule, not legal advice.
02 / OWNERSHIP
Your records.Your freedom.
Customers, vehicles, repair orders, deals and history. The dealership remains the owner of its records.
Export without an exit fee
Request your dataset in standard formats, during your subscription and, under the current policy, for 30 days after termination.
Stay because it works
No five-year lock-in. Clear terms and portable data leave the next move to you.
03 / PROTECTION
Considered at every layer.Enforced in the database.
Controls for the database, the account and the people who use them. Each one does one specific thing.
04 / WHERE YOUR DATA LIVES
Stored in the United States.Northern Virginia.
- Region
- AWS US-East (N. Virginia)
- Database
- Managed PostgreSQL
- In transit
- TLS
- At rest
- Encrypted
The full sub-processor list is available on request, under NDA.
05 / IF SOMETHING GOES WRONG
You hear it from us.Within 72 hours.
NOTICE
72hours
If a confirmed incident affects your dealership’s data, we tell you without undue delay, and within 72 hours of becoming aware of it, with what you need for your own 30-day FTC notice.
06 / DATA & AI
Intelligence.With boundaries.
Miles works inside your dealership’s instructions and the commitments in your agreement.
Your instructions govern
AI inputs and outputs holding personal information are processed on your dealership’s behalf, under its contract and data processing agreement.
No training on your customers
The current privacy policy prohibits AI providers from using dealer customer data to train general-purpose models unless your dealership authorizes it in writing.
Providers, on request
Ask for the data processing addendum and sub-processor list to see which providers process data and why. The privacy policy has the full terms.
07 / DOCUMENTS
For your review.Nothing to dig for.
Two are published. Two come to you on request, under NDA.
08 / REPORT A SECURITY ISSUE
Found something?Tell us first.
security@motivdms.com
Researchers and dealers alike. Our disclosure details are published in the standard place.
/.well-known/security.txtYOUR PEOPLE. YOUR DEALERSHIP. YOUR NEXT CHAPTER.