Security starts with tenant context
Identity alone is not authorization. Every dealership query resolves a server-side membership, role, organization, and location scope.
Tenant-scoped database queries
Granular role permissions
Signed sessions and webhooks
Rate limits and safe error responses
Content Security Policy and secure headers
Audited administrative boundaries
Configured capability, clearly labeled.
CarSniper fails safely when a production credential or licensed provider is unavailable. Sandbox and synthetic records remain visibly distinct from live customer data.