Security & data · inspectable, not just promised

Your garage data stays under your control

RevIXO gives independent garages role-limited access, an inspectable audit record and a full data export. Customer email and phone are encrypted at rest, and voice remains pre-launch until its required governance work is complete.

No badges, no certifications — just the specific facts, the exact access rules, and a full export whenever you want it.

RevIXO limits what each role can see. A full tenant data export is available, any time.

Maple Street Motors — Central · audit log, real activity grouped by entity

Is “security” just marketing language here? No. That’s the real audit log from the product, shown with realistic sample data. Every fact on this page is specific and narrow — there’s no badge or certification claim standing in for detail.

How does RevIXO protect garage customer data?

Customer email and phone are encrypted at rest with a random IV, passwords are hashed rather than stored in readable form, and production traffic runs over HTTPS. RevIXO does not store payment card details.

Customer email & phoneEncrypted at rest, each record with its own random IV (AES-256-CBC).
PasswordsHashed, never stored in a form anyone could read back.
Production trafficProduction traffic uses HTTPS.
Card detailsNot stored by RevIXO — payment processing is handled by a payment processor.
The database itselfNot exposed directly to the public internet.
Is everything I upload encrypted the same way?

No — we’re naming the two customer fields deliberately. Other stored data follows RevIXO’s standard technical handling, not this page’s headline claim.

Are card numbers stored anywhere in RevIXO?

No. Card details are handled by a payment processor; RevIXO never holds the number or the credentials behind it.

Could a member of staff read a password?

No. Passwords are hashed, not stored — there’s no readable copy to look at, not even for us.

Is this page a certification of some kind?

No. It’s a specific technical description of what RevIXO actually does, not a compliance badge or an audit grade.

Who can see customer, pricing and margin information?

Staff only see the garages they’re assigned to, and role and permission limits decide what they see inside that. The AI may use approved customer-facing prices, but it never sees supplier costs, stock levels or margins.

Role and garage assignment decide what each person can reach.

Can every technician see the money?

No. Sensitive financial views — costs, margins — stay admin-only regardless of role.

Can one garage see another garage’s customers?

No. Tenant filters plus explicit garage-access checks keep each garage’s data separate, even under one login.

Does the AI see margins when it quotes?

No. It can use the price the garage has approved for a customer to see, never the cost or margin behind it.

Running more than one site?

Each garage keeps its own diary, prices and data under one login; staff only see the sites they’re actually assigned to.

Can I export my garage data if I leave?

Yes. A full export is available at any time, and the archive stays encrypted while it’s stored and expires 30 days after you request it — nothing is left sitting around indefinitely.

Recorded activity, grouped by entity and available for inspection.

1

Request

An admin requests a full export of the garage’s data from the product.

2

Encrypted archive

The export is built and stored encrypted, not left as a plain file.

3

Authorised download

Only an authorised admin on the account can download it.

4

Expiry

The archive expires 30 days after it’s generated — it doesn’t sit around waiting to be found.

Whose data is it?

Yours. RevIXO doesn’t hold a garage’s own data hostage — the export exists precisely so you can leave with it.

Does access disappear the moment I leave?

No. Offboarding keeps your access read-only for a period rather than cutting you off immediately.

Does “audit log” mean literally every system event?

No. It records product activity and changes — bookings, invoices, payments, proposals and the like — not every internal technical event.

Is every business record deleted the moment I ask?

Not automatically. Some service and financial records may need to be retained for legal reasons, with identifying fields anonymised rather than the record simply vanishing.

The honest boundary

What happens to call data when the AI receptionist is used?

Running a call needs customer and booking information, and a specialist sub-processor is required to power the conversation. Real customer voice traffic stays blocked until the required processing agreement and impact assessment are complete.

Call outcomes are recorded; real customer voice remains gated pre-launch.

Specialist sub-processorRequired to power the voice conversation itself.
Engaged
Processing agreementThe documented agreement covering the sub-processor.
In progress
Impact assessmentThe required assessment of the voice processing itself.
In progress
Real customer voice trafficLive calls from real customers, not staged demonstrations.
Blocked until complete
Does call data leave RevIXO?

Running a call requires a specialist sub-processor, and real customer voice traffic stays blocked until the required processing agreement and impact assessment are complete.

Is voice already live for real customers?

No. Real customer voice traffic stays blocked until the governance work above is complete.

Are the provider documents finished?

Not yet — that’s exactly what’s gating a live launch, not a detail we’re glossing over.

Will recordings be deleted after a set number of days?

We won’t publish a retention period until it’s actually fixed and documented, rather than guessing at a number now.

Decide with eyes open

What should a garage owner ask about security and data?

Can I take my data with me if I leave?

Yes. A full export is available at any time, and the archive stays encrypted while it’s stored and expires 30 days after you request it, so it isn’t left sitting around. Offboarding then keeps your access read-only for a period rather than cutting you off immediately — though some service and financial records may still need to be kept for legal reasons after that.

Does the AI know my parts costs or margins?

No. It may use the garage’s own approved customer-facing prices when it quotes a job, but it never sees supplier costs, stock levels or margins — those stay visible only to the garage’s admin.

Which customer data does RevIXO encrypt at rest?

Customer email and phone specifically, each with its own random IV. We’re naming those two fields deliberately rather than claiming every record and file gets the same treatment — other stored data follows RevIXO’s standard technical handling, not this page’s headline claim.

Who can see customer and financial information?

Staff only see the garages they’re assigned to, and role and permission limits decide what they see inside that. Sensitive financial views — costs and margins — stay admin-only regardless of role.

Does RevIXO store payment card details?

No. RevIXO does not store card numbers or card credentials — payment processing is handled by a payment processor.

How does RevIXO approach UK GDPR?

Through specific, checkable controls rather than a certification claim: encryption of the fields named on this page, role-limited access, a full data export, and legal notices covering how data is used. The governance work behind voice is still in progress, and we say so rather than claiming it’s finished.

What happens to voice call data?

The same conservative boundary as above: running a call needs a specialist sub-processor, and real customer voice traffic stays blocked until the required processing agreement and impact assessment are complete. We won’t publish a recording-retention period until it’s fixed and documented.

Your rules, your record, your data — always.

What happens after I book a security and data walkthrough?

We’ll walk through roles, audit history, customer approval links and the export itself, live in the product, then send a written proposal afterwards.

  1. Book a short walkthrough
  2. See roles, audit history, customer links and export behaviour live in the product
  3. Get a written proposal, no pressure, no obligation

It runs in a browser, so there’s no new kit to install. Voice governance is still in progress, so this walkthrough covers what’s live today — booking, quoting, approvals, jobs and invoicing — not voice. RevIXO is pre-launch, so an early demo means talking directly to the team building it.

Get a personal demo

Tell us about your garage and we’ll set up a walkthrough that fits how you work.

No obligation · we don’t share your details

Loading full screenshot…