Security & multi-tenant

Dealership isolation

FlashFender is multi-tenant. Data access is scoped to your dealership — reports, inventory, deals, and leads belong to your tenant, not a shared global pool.

Server-side authorization enforces ownership. Clients cannot “pick” another dealership’s rows by guessing IDs in the UI.

Auth

Sessions are established on the app origin. Marketing never handles passwords.

Soft delete & floors

Operators protect production demo floors and avoid hard-deleting dealerships that still hold vehicles, deals, or invoices. Soft-delete patterns apply for platform admin cases.

Public APIs

Public inventory embed endpoints require a scoped identifier (dealership id, slug, or token). The open API, webhook events and one-click full dealership export shipped in Tier 1 — see Open API, webhooks & data export and Audit trail & retention.

Learn more

Marketing security page: flashfender.com/security.