Authenticated access
The secure Tracker requires an authenticated Supabase user session. Password recovery returns users through the established secure authentication flow.
Security
Verified controls, described without inflated certification claims.
Security depends on product design, customer administration, and careful operating practices. This page describes controls confirmed in the current Dealer Title Tracker implementation.
Role-based access
Owner, administrator, staff, and read-only roles limit what assigned users can do. Platform administration is separately restricted.
Store and tenant separation
Database Row Level Security and membership checks limit production records to assigned dealership scope. Customer users are not granted platform-wide access.
Restricted administration
Billing administration, QA, testing, prospect previews, reconciliation, and other internal controls remain restricted to the authorized roles defined for those functions.
Encrypted transport
The public site, secure application, Supabase APIs, and authentication endpoints are served over HTTPS.
Activity evidence
The application maintains record-change and workflow event history for supported functions. The exact history available depends on the function and enabled workflow.
No card-data storage
Dealer Title Tracker does not store full card numbers, CVVs, or raw payment credentials in customer or billing tables.
Controlled public assets
Public examples use synthetic information. Customer names, VINs, record identifiers, documents, and tracking numbers are not authorized for marketing assets.
What we do not claim
No certification is implied.
Dealer Title Tracker does not publicly claim SOC 2, PCI, ISO, HIPAA, GDPR, guaranteed uptime, guaranteed compliance, or complete 50-state certification. Additional controls, backup details, recovery objectives, and security commitments should be documented only after verification and, where appropriate, in a signed agreement.
Do not send sensitive records by ordinary email. Send a brief description and contact information to illinoistitleservices@gmail.com so Illinois Title Services can arrange a safer follow-up channel.