Security

Your data, kept in its lane.

Every dealer group's records are kept apart, every request is checked against the person's role, and every approval and price change goes into a log that can't be edited. Here is how, in plain words.

Book a demo Who can see what
Sign-in
An e‑mailed code or a password
Access
Checked at each record's own rooftop
Audit log
Edits and deletes refused

Kept apart

No one else's business.

Each dealer group's records are kept apart from every other's. Every appraisal, stock unit and deal is checked against the person's role at that record's own rooftop, so a manager at one branch and a viewer at another gets exactly that, never the sum of the two.

  • Another dealer group's records answer “not found”
  • Your group and rooftop come from your sign-in, never from your browser
  • DealRevs staff who set up your group can't open your appraisals, stock or deals

Who asks for APR-0381 · Sample

2022 Land Cruiser GXR · Sandstone Motors Downtown

Checked on every request
  1. Rania Saadeh Used-car manager · Downtown Shown Allowed at this rooftop
  2. Lina Farouk Sales executive · Downtown Not shown Sales see only their own
  3. Another dealer group Anyone signed in there Not found Not their organisation
  4. DealRevs platform staff They set up dealer groups No access No “log in as”

The dealer group and rooftop come from the person's sign-in, never from anything their browser sends. A record in another group answers “not found”.

On the screen DealRevs staff use to set up dealer groups

“Organisations are managed here; their data stays theirs.”

The people who create dealer groups have no access to a dealer's appraisals, stock or deals, and there is no “log in as”.

Signing in

Six digits. Ten minutes. Five tries.

Sign in with a 6-digit code sent to your e‑mail, or with a password. Every sign-in action is rate-limited, and a sign-in from a new browser sends you an e‑mail. Try the limits for yourself.

Sign in · Sample

Rania Saadeh · Used-car manager

Sign in with
E‑mail rania@sandstone.example.com

If rania@sandstone.example.com has a DealRevs account, we've sent it a 6-digit code.

Valid for
10:00
Tries left
5
Codes this hour
1 of 6
Password
  • 10 to 200 characters
  • Not a common password
  • Doesn't contain your e‑mail address

0 of 10 failures in a row

Forgotten? A single-use link, valid for an hour.

A code lasts 10 minutes and allows 5 tries.

  • Every sign-in action is rate-limited
  • A sign-in from a new browser sends you an e‑mail
  • Signed in for 90 days, or until 30 days unused

Who can see what

Each role sees what it needs.

Eight roles, each with its own list of permissions, so nothing is inherited by accident. What a role may not see is left out by the server, not just hidden on the screen.

Six of the eight default roles · Sample people

Pick a role to see what it gets

What each role sees and may do, with the default settings
Role Customer contact detailsCost and marginAppraisalsApprove offers
Owner Faisal Rahimi Shown Shown All Any amount
Used-car manager Rania Saadeh Shown Shown All Up to AED 150,000
Sales executive Omar Haddad On their own appraisals Left out Their own No
Buyer Vikram Rao Masked Shown All Up to AED 100,000
Finance Dana Yousif Shown Shown All No
Prep coordinator Joel Santos Left out Enters, never sees None No

Buyer Vikram Rao

Customer contact details
Masked: Masked
Cost and margin
Yes: Shown
Appraisals
Yes: All
Approve offers
In part: Up to AED 100,000

Vikram Rao, buyer: sees every appraisal and what each car cost, and approves offers up to AED 100,000. Customer names are left out and phone numbers masked, like +971 •• ••• 0100.

Approval limits are the defaults; owners and group admins can change them. A person can hold a different role at each rooftop, and every record is checked against their role at its own rooftop.

  • Nobody grants more than they hold

    Only owners and group admins manage the team, and only an owner can make an owner.

  • Nobody changes their own access

    And a dealer group can never lose its last active administrator.

  • Every team change is audited

    Invitations are single-use links that last 7 days. Each change to the team goes into the audit log.

Photos and customer details

Private unless your role allows it.

Photos, documents and customer details are for the people who need them. Nothing is public, and what a role may not see never reaches its screens.

  • No public photos

    Every photo and document loads through a short-lived signed link, checked against your dealer group and your permissions.

  • Originals kept privately

    The camera original sits beside the display copy, under a random name that can't be worked out from it.

  • Your photos are yours

    Dealer photos belong to the dealer. A won car's photos move to its stock record; damage photos stay on the appraisal.

  • Consent, with its wording

    A customer's consent is recorded with the version of the wording they were shown, and kept append-only.

Market data

Market data in. Customer data stays.

Market figures come from our daily snapshot of UAE listings, read at 06:00 Gulf time. Nothing about your customers goes the other way: their details are never sent to the market data provider, and VINs are hashed in shared caches.

  • Seller names and ad VINs from the listings never leave our servers
  • No customer details go to the market data provider
  • Paid checks show their price, and who pays, before they run

What crosses each line

Stops at the line

Your dealer group

  • Customers' names and contact details
  • Appraisals, photos and offers
  • Cost and margin

You are the data controller

  • Goes through: Your requests, checked against your role
  • Never crosses: Seller names and ad VINs Never crosses

DealRevs

  • Scopes every request to your dealer group
  • Hashes VINs in shared caches
  • Comes in: UAE listings, read at 06:00 into our own snapshot
  • Goes through: A VIN to decode or check
  • Never crosses: Customer names and contact details Never crosses

Our market data provider

  • UAE listings and the catalogue
  • VIN decodes and history checks

Market figures on your screens come from the 06:00 snapshot. No screen calls the market feed live.

The audit log

A record that only grows.

Every approval, price change, permission change, settings change and export goes into an append-only audit log, with who and when. The database itself refuses edits and deletes, and exporting the log is audited too.

Audit log · Today · Sample

Sandstone Auto Group

Append-only
  1. 09:42 Faisal Rahimi approved APR-⁠0381 at AED 206,000 Approval
  2. 10:15 Faisal Rahimi approved a price change: 2019 GMC Yukon Denali to AED 124,300 · reason: Aged stock: moving towards the market Price change
  3. 10:52 Mei Tan saved version 2 of the offer calculator Settings
  4. 11:08 Mei Tan invited Grace Okafor as a sales executive Team
  5. 11:20 Dana Yousif exported the audit log Export

Entries are only ever added. Try changing Faisal Rahimi's approval of APR-0381.

Where it runs

Where your data lives.

DealRevs is one web app. Its servers sit beside its databases, because each screen makes many trips to the data, and the server should be next to it.

App servers
London
Pinned beside the databases
Databases
Western Europe
Your records and the daily market snapshot
Photos and documents
Private storage
Loaded only through short-lived signed links

As of October 2026

Questions

Worth asking first.

Can the people who set up our account see our stock?

No. The DealRevs staff who create dealer groups can't open a dealer's appraisals, stock or deals, and there is no “log in as”.

Who is responsible for our customers' data?

Your dealer group is the data controller of its customers' data. Dealer photos belong to the dealer.

What does the market data provider learn about our customers?

No customer details go to it. A VIN decode or a history check sends the VIN; names, phone numbers and e‑mails stay in DealRevs. VINs are hashed in shared caches.

Does anything change a price by itself?

No. The agents suggest; a person makes every change. By default every offer needs a manager or owner to approve it, and so does a price drop of AED 10,000 or more, with a reason. Every approval carries a name in the audit log.

Can we see who exported our data?

Yes. Exports are audited, and so is exporting the audit log itself.

Can a paid check run without anyone knowing?

No. A paid check shows its price, and who pays, before it runs. If the price changes in the meantime, the run is refused, and a failed run isn't charged.

Keep exploring

Security questions

Need a security questionnaire answered?

Send it to hello@dealrevs.com, with anything else your IT or compliance team wants to know.

E‑mail your questionnaire Book a demo