Security & data
You're about to put your customers, your vehicles, and your revenue into software you didn't write. Here's exactly how that data is protected — and what you can take with you if you ever leave.
All card payments run through Stripe, a PCI Service Provider Level 1 processor. Card details go from your customer to Stripe directly — they are never stored on our servers, and neither we nor your staff can see a full card number.
Every connection to MyAutoShopPro — dashboard, tablet, customer portal, and your shop's website — is served over HTTPS with TLS. That includes custom domains, which get their own certificates automatically.
Owners, managers, service writers, and technicians each get their own account with their own permissions. Technicians sign in to the tablet with a PIN, so the shop floor never needs a shared password on a sticky note.
Every record is scoped to your shop, and every request is authorized on the server — not just hidden in the interface. One shop cannot read another shop's customers, vehicles, or numbers.
Changes that matter — team access, payments, closed time periods — are recorded with who did them and when, so you can answer questions about your own shop after the fact.
Login, customer portal, and public endpoints are rate-limited, and outbound webhooks are HMAC-signed so the receiving system can verify the request genuinely came from us.
Your customers, vehicles, repair orders, and financial records are yours, not ours. Report data exports to CSV from the dashboard, and you can request a full export of your account's data at any time — no fee, no exit interview.
Cancel and you keep access to export your data for 30 days. After that we securely delete it. We don't hold your shop's history hostage to keep you subscribed.
We're a young company, and we'd rather tell you that than dress it up. MyAutoShopPro does not currently hold a SOC 2 or ISO 27001 certification, and we don't publish an uptime SLA. If your business requires either, talk to us before you sign up rather than after — we'll tell you honestly where we are.
Found a security issue? Report it to security@myautoshoppro.com and we'll respond. We won't pursue action against anyone reporting a vulnerability in good faith.
Ask us anything about how your data is stored, used, or exported. You'll get a straight answer from someone who built it.
