Secure Customer Intake
The buyer completes it on their own phone. Your sales floor never sees the PII.
- One QR code at the desk starts everything: identity verification, the application, and every compliance approval, on the buyer's phone, in about two minutes.
- The completed application routes to your DMS and your lenders, and your bureau relationships stay exactly as they are.
- The moment it's submitted, the sensitive parts lock down to the people who actually need them.
Four steps. Two of them are nobody's job.
- The desk generates the code. Your salesperson creates a QR code for the deal. That is their entire part in the data collection: no typing, no photocopies, no handling documents.
- The buyer completes it on their phone. Identity verification, the application, and the compliance approvals: privacy policy, terms and conditions, consent to a hard credit check, consent to sign electronically. Each approval is captured separately, time-stamped, and filed to the deal.
- The data routes where it already goes. The completed application flows to your DMS and your lenders. Your bureau relationships stay exactly as they are: DealSafe captures the buyer's consent to a hard credit check, your store initiates the pull through DealSafe on your existing bureau relationship, and DealSafe reports the results into the deal. DealSafe moves the paperwork. It does not sit between you and your lenders.
- The PII locks down. On submission, sensitive data becomes visible to general managers and finance managers only. Salespeople see their deals and their statuses. Nothing else.
Four approvals. Captured separately. Time-stamped.
A signature at the bottom of a stack of papers is one consent covering everything, which means it proves nothing in particular. DealSafe captures each approval as its own event: the privacy policy, the terms and conditions, the consent to a hard credit check, and the consent to electronic signature. Each one is time-stamped at the moment the buyer agrees, and each one is filed to the deal's Book of Evidence.
When a lender, insurer, or examiner asks how a consent was obtained, you don't describe your process. You export the record.
Need-to-know, enforced by the system.
The Safeguards Rule requires limiting customer information to the people who need it for their job. Most stores meet that with a policy document nobody can audit. DealSafe meets it in the product:
- General managers and finance managers see the full file.
- Salespeople see their deals and statuses. No credit data, no driver's license images, no Social Security numbers.
- Every access is logged. Who opened what, when, on which deal.
That log is not overhead. After an incident, the difference between "we had a policy" and "here is the access record" is the difference between a finding and a defense.
Not comfortable on their own phone? Same flow, your iPad.
Your salesperson walks through the exact same steps with the buyer on an iPad, side by side. The buyer still sees and approves every consent themselves. Same record, same time-stamps, same lockdown afterward. Nobody gets waved through, and nobody gets stuck.
Scope honesty, as usual.
Secure Customer Intake is:
- QR-started identity verification, application, and consent capture on the buyer's phone
- Routing of the completed application to your DMS and your lenders
- Role-based PII access with a logged audit trail
- Included in The Desk and The Group
Secure Customer Intake is not:
- A credit bureau or a lender. The credit pull runs on your existing bureau relationship. DealSafe captures the consent and reports the results; it never scores applicants or makes credit decisions.
- A replacement for your lender relationships. The data routes to them, not around them.
- A desking, menu, or deal-structuring tool
[pending: first customer logos]
See Red Flags & ID verification · See the Safeguards Rule program · See training & audit support · See pricing
The intake, by the numbers.
What if a buyer starts on their phone and doesn't finish?
The deal shows the incomplete status, and your salesperson can finish the flow with them on the iPad. Nothing is lost; the record picks up where it stopped.
Does DealSafe pull the credit?
No. DealSafe captures the buyer's consent to a hard credit check and files it to the deal. Your store then initiates the pull through DealSafe using your existing bureau relationship, and DealSafe reports the results back into the deal file. We are not a bureau and not a lender: your bureau and lender relationships stay exactly as they are, and DealSafe never makes a credit decision.
Can a salesperson ever see the SSN if they need to?
Access follows role, not request. If someone needs broader access, a GM changes their role, and that change is logged too. There is no "just this once" backdoor, which is precisely what makes the audit trail worth something.
Does this work for remote buyers?
Yes. The same flow runs by link before the buyer ever reaches the store: verification, application, and consents completed in advance, with the same lockdown on submission.
Which tier includes this?
The Desk and The Group. See the pricing page for the full comparison.
What happens to the data if we leave DealSafe?
You export everything, applications, consent records, and access logs, before the account closes. Your data is yours, in writing, as with every DealSafe tier.