Security & Trust
What we actually check, and how.
This page shows only verifiable facts — no marketing claims, and no certification we don't actually hold.
Encrypted connection
Every connection to Fahrzüg AI runs over HTTPS/TLS. Session cookies are encrypted and marked "HttpOnly" and "Secure".
Protected accounts
Sign in with a Google account or an email link. Administrator accounts never get a persistent login and are signed out automatically after inactivity.
Role-based access control
The admin area is protected by authentication, its own authorization check, and rate limiting.
Traceable admin actions
Security-relevant admin actions (suspensions, approvals, role changes) are logged with their before/after state.
Verifiable business profiles
Dealer and business profiles go through a manual review before being shown as verified.
Controlled data imports
Uploaded images are checked for format, size, and actual file content, and are re-encoded server-side before publication.
Private documents stay private
Certain document types are never served from a public address.
Privacy Center
You can export your data or request account deletion at any time.
Honestly: what isn't true yet
- Uploaded files are not currently scanned automatically for malware.
- Two-factor authentication is planned but not yet active.
- There has not yet been an independent external security review (penetration test).
Planned next steps
- Automated monitoring of TLS and security headers.
- Automated scanning of uploaded files for known malware.
- Automated scanning for known vulnerabilities in the software components in use.
- Independent security review before a larger public launch.
- Documented backup and restore test.
Found a security issue? Contact details