Security, and where your data lives
The short version
Your data stays in your building.
Nothing in it can send your data out. It is built that way, not promised.
Where it runs
Carniche runs on hardware inside your dealership. It stays in your building and serves your store and nothing else. The AI runs on that hardware too.
No shared cloud. No database shared with thousands of other stores.
Access is by PIN or a single-use link, issued per person.
What never leaves the building
- Customer identity and contact information
- Credit files and lender approvals
- Vehicle cost, pack, and holdback
- Payroll, pay plans, and commission detail
- The deal record itself
Take the box out and your store is exactly where it was.
What does move, and how
In: a nightly export from the systems you already run. One direction, into the box. Inventory, cost, deal history, product performance, pay plan data, service and install records.
We read. We never write. Nothing is written back into your DMS, your CRM, or anything else you run. No integration is required. No credential of yours is held by us.
In: tax tables, fee schedules, disclosure requirements, and product rules. Those change constantly and across jurisdictions. They arrive as updates and they carry nothing back.
Out, once a month: a count of stock numbers at month start and month end. That is how you are invoiced, and it is all that goes. No customer, no deal, no gross attached to it.
There is no bulk export. There is no standing copy of your inventory, your customers, or your numbers held anywhere outside your building.
What we do not do
Nothing is pooled. Your deals are never aggregated with anyone else's.
No model is trained on your business. Not ours, not a vendor's, not anyone's.
Nothing is commingled with the store down the road.
If you ever choose to sell your own data, that is a separate agreement, it pays you, and it is off unless you turn it on.
We do not sell your data. There is no version of this business that depends on doing so.
Who decides
Every recommendation goes to a person. Nothing is submitted, approved, or signed by software.
It computes. It does not decide. The math is never guessed and never will be: payments, gross, tax, and commission are calculated. The desk picks.
A conversational assistant can be added on top, either with a hardware expansion or by allowing the box to reach an outside model. That is a choice a store makes deliberately, and it is off unless you turn it on.
What we do not have
There is no SOC 2 report. There is no penetration test report. There is no third-party attestation and no completed security questionnaire pack.
Encryption at rest, backup, and access control are requirements of the build. None of them has been through an outside audit, and a design is not a certification. If your IT director asks for an audit report, the answer is that one does not exist.
What can be checked instead is the construction. One box, on your network, reading a nightly export and writing to nothing but itself. Access by PIN or a single-use link, issued per person. The only thing that leaves is a monthly count of stock numbers.
Compliance
Carniche holds no certification, no attestation, and no legal opinion on compliance, and there is no list of jurisdictions.
What can be stated is how the system behaves. Nothing is submitted, approved, or signed by software. Nothing is written into your deal jacket, your DMS, or any record of yours, so the compliance history of every record stays exactly where it already was.
Anything specific to your store is a question for your counsel.
Uptime and independence
The AI runs on the box. An outage somewhere else is not an outage for you. If a vendor's cloud goes down, your desk keeps writing deals.
Removal
The system comes out in an afternoon.
Nothing of yours goes with it, because nothing of yours was ever anywhere else. No record of yours was changed. No data was migrated anywhere it has to be migrated back from. No process got rebuilt around us.
Take the box out and your store is exactly where it was.