Security

Each person sees what their role allows.

Roles are set per rooftop and checked on the server for every record. Restricted fields are left out, not hidden. The audit log can't be edited, and there is no “log in as”.

Signed inDunebrook MotorsA manager at Dunebrook asks for a record that belongs to another group.GET /appraisals/APR-0381
Server checkNot foundThe organisation comes from the sign-in, never from the browser, so another group's records simply don't exist for you.
Another organisation
Sandstone Auto GroupAPR-0381 · 2022 Toyota Land Cruiser GXRPlatform staff create organisations but can't see dealer records either.

Roles

Left out by the server, not hidden on the screen.

Eight roles, held per rooftop. Without permission, cost and margin never reach the browser, and customer contacts arrive masked. Pick a role to see the same appraisal through its eyes.

Viewing as · Rania Saadeh, managerDowntown
APR-0381 · 2022 Toyota Land Cruiser GXR
Omar Haddad · GCC · 41,200 km
Offer
AED 206,000
Pay up to
AED 210,300
Margin at the expected price
AED 23,242
Customer phone
+971 50 123 0100
Approve offers up to
Up to AED 150,000
VAT treatment
Margin scheme · read only

Every record is checked against this role at its own rooftop.

CapabilityOwnerAdminManagerSalesBuyerPrepFinanceViewer
Appraise and valueYesNoYesYesYesNoNoNo
See appraisalsAllAllAllOwnAllNoAllNo
Price and edit stockYesNoYesNoNoNoNoNo
Cost and marginYesYesYesNoYesEntersYesNo
Customer contactsYesYesYesOwnMaskedNoYesNo
Search the marketYesNoYesYesYesNoNoNo
Confirm VATYesNoNoNoNoNoYesNo
Record a saleYesNoYesNoNoNoYesNo
InsightsYesYesYesNoYesNoYesYes
Prep boardYesNoYesNoNoYesNoNo
Team, settings, policiesYesYesNoNoNoNoNoNo

Defaults. The app names 34 permissions, shown read-only in Settings.

The data boundary

Market data comes in. Your customers stay put.

AutoData supplies the vehicle and market data. It is called from DealRevs' servers only. No customer details are sent, and VINs are hashed in shared caches.

AutoData Middle EastSupplies
  • Catalogue · 198 makes, 8,627 trims
  • VIN decoding, with a match level
  • Reference values · monthly at best
  • Import check and vehicle history
  • The daily listings feed
Data in · called from the serverVIN lookups out · no customer details
DealRevsKeeps
  • Organisations
  • Users
  • Appraisals
  • Customers
  • Stock
  • Approvals
  • Deals
  • The audit log

In DealRevs' own database. The dealer is the data controller, and consent is stored with the wording the customer saw.

How customer data is handled

The dealer is the data controller, and consent is stored with the wording the customer saw. How customer data is handled

DRSign in

Check your e-mail

If omar@sandstone.example.com has a DealRevs account, we've sent it a 6-digit code. It expires in 10 minutes.

Sign-in code

Sign in
Send a new code in 30 sUse a different e-mail

Signing in

A code by e-mail, or a password. Nothing to install.

E-mailed code
6 digits · 10 minutes · 5 tries
Password
10–200 characters · locks after 10 failures
Sessions
90 days · 30 idle · end any session anywhere
New browser
An alert by e-mail
Accounts
Existence is never revealed
Team changes
Need a recent sign-in

The audit log

Append-only, down to the database.

Price changes, approvals, permission and settings changes, and exports all go on the record. Exporting the log is recorded too. A correction is a new entry, never an edit. Try it.

Audit log · Sandstone Auto GroupMonday 12 October
  1. 09:31Omar HaddadAppraisalsAPR-0381 · Submitted for approval at AED 206,000
  2. 09:42Faisal RahimiAppraisalsAPR-0381 · Approved at AED 206,000
  3. 10:15Rania SaadehStock2019 GMC Yukon Denali · AED 134,900 → AED 123,700
  4. 11:05Dana YousifAppraisalsAPR-0381 · VAT treatment confirmed: Margin scheme
  5. 11:20Mei TanStockExported 64 cars
Press the pencil on any entry.

Team rules

Nobody grants more than they hold.

  • Only owners and group admins manage the team.
  • Nobody changes their own access, and the last admin can't be removed.
  • Deactivating someone ends their sessions.
  • Invitations are single-use and expire after 7 days.
  • Platform staff create organisations but can't see dealer records. There is no “log in as”.

Hosting · October 2026

London and Western Europe.

  • The app runs on Cloudflare Workers, pinned to London.
  • Databases are in Western Europe.
  • Photos and files sit in private storage, under unguessable names.
  • Files open only through short-lived signed links.
Send a security questionnaire security@dealrevs.com

See it with your own cars.

Bring a car you're about to buy and a few from your lot. We'll value them against this morning's market, show what DealRevs would suggest, and walk through who would approve what. If it fits, we set up your dealer group with working defaults from day one.

Or write to hello@dealrevs.com .