Security
Built to protectwhat matters most.
We work with your most sensitive data, and we know how much security matters to every dealership. That's why evolane is built on modern, state-of-the-art technology, running on Amazon Web Services (AWS), the same cloud trusted by the world's leading banks, insurers and healthcare companies, and even government intelligence agencies.
At a glance
Security, built in.
Your numbers stay private.
Each dealership's data is securely isolated, and department-level permissions let you decide exactly who on your team sees what. Any market comparisons use combined, anonymous figures from many dealerships, never one dealer's numbers on their own.
Hosted in your region.
Canadian dealerships' data is stored on AWS servers in Canada.
Your password stays yours.
Sign-in goes through Amazon's own secure login service. evolane never sees or stores your password.
We don't keep customer personal data.
We never store your customers' personal information.
Insured.
evolane carries errors and omissions (E&O) and cyber liability insurance. Certificates available on request.
Our commitments
How we treat your data.
Your data is yours.
Your store owns its data. We use it only with your consent, and only for the purposes your agreement sets out.
Nothing changes without your approval.
We recommend; your people decide. Nothing is done on your behalf, in our platform or in your DMS, unless your store has approved it.
Every change is on the record.
Every change is recorded and auditable: who made it and when, whether it came from your team, ours or the system. The audit trail is protected from tampering, earlier values are kept when a figure changes, and your store's history is available to you on request.
Private to your store.
No other dealer sees your store's data. On Marketplace, other dealers see only what you choose to publish. Anything learned across stores uses de-identified data, under terms you've agreed to.
Access only when needed.
Our team accesses your data only when it's needed to support you or run the service, and that access is recorded.
AI on your terms.
Any AI in our platform works within your store's permissions. Your store's identifiable data is never used to train AI for other dealers.
Data residency
Where your data lives
Where your data is hosted depends on where your store operates and the privacy and regulatory requirements that apply to it. Data for Canadian stores is stored in Canada, and backups stay in the same region as the data they protect.
Our databases aren't reachable from the public internet; only our own services can connect to them.
Encryption
Encrypted in transit and at rest
Data is encrypted in transit with TLS 1.2 or higher, and at rest with AES-256, including backups and the credentials we hold for you. Encryption keys are managed in a dedicated key management service and rotated automatically.
DMS connection
Certified. Connected. Under your control.
Every DMS integration we offer is certified by the provider and meets or exceeds their security standards. You decide what we can see. We use only the data you approve, and only what's needed to deliver data-driven insights and automate the workflows that matter to your store and your market.
Privacy
Privacy
We handle personal information in line with the privacy laws that apply where your store operates, including Canada's PIPEDA and Quebec's Law 25. Our Privacy Officer is accountable for how we handle it and can be reached at privacy@evolane.ai.
If you leave, you can request a copy of your data, and we handle what remains as your agreement sets out.
Read our website privacy policySecurity reviews
Review us
Hand us your toughest security questionnaire, from your internal IT team or an independent auditor. Prefer a live walkthrough? We'll show your team exactly how we protect your data, answer every question, and prove that security isn't a feature we added. It's the foundation we built on.
Send a questionnaireResponsible disclosure
Report a security issue
If you think you've found a security vulnerability in our website or platform, send us the details through our contact form. We review every report and keep you updated.
Please give us reasonable time to fix the issue before disclosing it, and don't access, change or keep data that isn't yours.
Report a security issue