SOC 2 — Trust Services Criteria
SOC 2 is a reporting framework from the American Institute of CPAs (AICPA). It evaluates a service provider’s controls against the Trust Services Criteria: security, availability, processing integrity, confidentiality and privacy. A SOC 2 report is issued by an independent CPA firm after an examination.
- Published by:
- AICPA
- Official source
- Official source
Why it matters to your dealership
Your claims, units, invoices and customer records live in our platform. SOC 2’s criteria describe exactly the controls a dealership should expect from any vendor that holds that data.
Our status
Dealer Suite 360 is designed around the SOC 2 Trust Services Criteria. We have not completed a SOC 2 examination and do not hold a SOC 2 report.
How Dealer Suite 360 applies it
- Role-based access: dealership staff, owners, customers and our team each see only what their role allows.
- Strict separation of every dealership’s data — every request is checked on the server against the user’s dealership.
- Two-factor authentication (authenticator app or email codes) available to every account and strongly recommended.
- Encrypted connections (HTTPS/TLS) for every page, file and API call.
- Sign-ins, failed attempts and security changes are recorded in an audit log.
- Change control: every production change is versioned and deployed from source control.
Dealer Suite 360 is designed and operated in alignment with these frameworks. Alignment does not imply formal certification.
