Security and trust
Your dealership data, hosted in Canada and kept safe
CarcoCRM is Canadian-owned, with your core data hosted in Canada, privacy handling aligned to PIPEDA, permission-scoped access control, and clean separation between every dealership on the platform. Here is exactly how we handle your data, including the named providers that process limited data outside Canada.
Hosted in Canada
Your core dealership data is hosted in Canada, run by a Canadian company under Ontario law.
PIPEDA-aligned
Privacy handling built to align with Canada's federal privacy law, PIPEDA.
Role-based access control
Permission-scoped access so each staff member sees only what their role should.
Per-tenant separation
Every dealership's data is separated, so one tenant can never see another's records.
Encrypted in transit
Traffic between your team and CarcoCRM is encrypted, and internal identifiers stay opaque.
Regular backups
Your data is backed up on a regular schedule and preserved, not quietly discarded.
Data residency
Your data is hosted in Canada
CarcoCRM is Canadian-owned, and your core dealership records are hosted in Canada, governed by Ontario law. A small number of named service providers process limited data outside Canada under contract, listed openly on our Subprocessors page, so residency is not an afterthought bolted onto a foreign platform.
- Canadian-owned, with your core dealership records hosted in Canada
- Governed by the laws of Ontario, Canada
- Privacy handling aligned to PIPEDA, Canada's federal privacy law
- A few named providers, for example SMS and analytics, process limited data abroad under contract, listed on our Subprocessors page
Access control
The right people see the right data
Access is permission-scoped through role-based access control, not one blunt admin switch. Reps see their own work, managers see the floor, and sensitive actions stay with the people who should hold them. Every dealership on the platform is cleanly separated.
- Permission-scoped, role-based access control across your whole team
- Sensitive actions restricted to the roles that should hold them
- Per-tenant separation, so no dealership can see another's data
- Identifiers exposed as opaque IDs, never sequential integers that can be guessed
Privacy and retention
Handled with care, kept safe, kept available
We handle customer and dealership data in line with PIPEDA, encrypt it in transit, and back it up on a regular schedule. Your data is preserved and available, not treated as disposable.
- Privacy handling aligned to PIPEDA
- Traffic encrypted in transit between your team and the platform
- Regular backups so your data is preserved and recoverable
- Data preserved rather than hard-deleted, in keeping with Canadian retention practice
FAQ
Security questions dealers ask
Straight answers about where your data lives and how it is handled.
Run your lot on a platform built to be trusted
Start a 30-day free trial or book a guided demo. Canadian-hosted, PIPEDA-aligned, and built for how Canadian dealers work.