One standard, every store
Group-wide policy templates for the written security program, the Identity Theft Prevention Program, the incident response plan and the vendor register. Change the template once and every rooftop's program updates.
The Group
Four corners of compliance
Ten rooftops, ten programs. One standard.
Most groups grew by acquisition, and each store brought its own compliance habits. One has a current risk assessment and one has a binder from 2019. Training is logged in three stores and remembered in the rest. When the group's insurer, floor-plan lender or a buyer's diligence team asks for the program, the answer is ten phone calls.
The Safeguards Rule does not care how a store was acquired. Each rooftop that finances or arranges financing is a financial institution with its own obligations, and the Qualified Individual answers for all of them.
Group-wide policy templates for the written security program, the Identity Theft Prevention Program, the incident response plan and the vendor register. Change the template once and every rooftop's program updates.
Training completion, identity verification activity, open findings and evidence status by rooftop. The group compliance lead sees the laggards without asking.
The Book of Evidence for a rooftop, or the whole group, exported in the form a buyer's or seller's diligence team expects. Compliance gaps become purchase-price chips; a current file protects your number on either side of the table.
A named DealSafe program manager for the group, plus priority support, including Saturdays.
Each rooftop on The Group gets the full Desk program: the Safeguards program with Qualified Individual support, role-based training assigned at hire and logged, QR customer intake with per-deal identity verification before funding, Red Flags screening on every deal with OFAC on demand, credit through your 700Credit account, lender packages to DealerTrack and RouteOne with CUDL to follow, PII locked to general managers and finance managers, and every access logged. DealSafe never connects to your DMS.
See pricing · See the Safeguards Rule program · See Red Flags & ID verification · See Secure Customer Intake · See training & audit support
Related reading: How to choose dealer compliance software: a buyer's guide · The FTC Safeguards Rule for auto dealers: a plain-English checklist · Why DealSafe · Enforcement Watch
A group with five rooftops pays five subscriptions at the tier it chooses. The group dashboard and templates work across the rooftops on The Group; a rooftop on The Desk still runs the full program but reports on its own.
One physical dealership location. If two franchises share one address and one DMS instance, ask us on the gap assessment call and we will give you a straight answer in writing.
Yes, at any time. Each new rooftop starts its own 12-month agreement.
The written programs, the current risk assessment, training logs, identity verification records, vendor contracts, testing results and the annual board report for the rooftops in the transaction, exported as one file. Your data is yours; the export is in the agreement, not just on this page.
The rule allows one Qualified Individual to cover several stores, or one per rooftop. DealSafe supports either. Responsibility stays with the dealership either way.
Published pricing, a 12-month agreement billed monthly, no setup fee, and a program that already runs on the founder's own rooftops at Tyrrell Auto Centers. Already decided? Start your order.