AI your managerscan trust.
SOC 2 Type II audited. Hosted on Google Cloud Platform. Continuously monitored by Vanta. Every action requires manager approval and lives in an exportable audit trail.
Three things that make NEONsafe to bring into your store.
Show the work
Every recommendation cites the source data behind it: the comps, the history, the market feeds, the dealer rules. Click any insight to see the math. We never ask managers to trust an answer they cannot audit.
Human in the loop
v.Agents prepare work; they do not act on it. Repricing queues, customer outreach lists, service follow-ups: every action waits for manager approval. No autonomous writes to your DMS or CRM without sign-off.
Audit trail on every action
Every recommendation NEON made, every action your team approved or rejected, every write to a connected system: captured, timestamped, attributable, and exportable.
What comes in,and what goes out.
NEON reads from the systems you already run. Every integration starts read-only; a write scope is granted per action, when a manager turns that action on.
Hosted on Google Cloud Platform in US regions. TLS 1.3 in transit, AES-256 at rest. Tenant data is logically separated and never co-mingled with other dealers.
More than 50 audited controlsacross five governance categories.
The live inventory of controls, with status and last-verified timestamps, is on the Trust Center and updated hourly by Vanta.
| Category | Controls | Examples | Verified |
|---|---|---|---|
| Infrastructure security | 21 | Unique production database authentication; encryption key access restricted; production OS and network access restricted; firewall access restricted; access revoked on termination | Continuous · Vanta |
| Organizational security | 13 | Background checks; anti-malware; confidentiality agreements for employees and contractors; password policy; production inventory maintained | Continuous · Vanta |
| Product security | — | Penetration testing; data transmission encrypted; vulnerability and system monitoring; control self-assessments | Continuous · Vanta |
| Internal procedures | — | Incident response policy; vendor risk management; change management for production; business continuity and disaster recovery | Continuous · Vanta |
| Data and privacy | — | Customer data segregation; retention and disposal procedures; privacy policy reviewed; right-to-delete supported | Continuous · Vanta |
Counts are shown where the Trust Center publishes them. View all controls on the Trust Center.
Who can connect what,and who sees the result.
| User-scoped | Dealership-scoped | |
|---|---|---|
| Examples | Gmail, Outlook, calendars | DMS, CRM, MarketCheck, Google Analytics |
| Who authorizes | The individual user | A dealership admin |
| Who can read | Only that user. Other users cannot see the messages or use the credentials | The store, controlled by role |
| Write access | Read-only until the user turns on a specific action | Per action, with explicit manager approval. No blanket write toggle |
| Audit | Every send and read logged to the user | Every write attributable to the approving manager |
Every integration starts read-only. When you turn on "Approved reprice to DMS", that is when the write scope is granted, scoped to that one operation.
The vendors that processVehicle AI data.
We keep this list short and current. Adding a subprocessor requires internal security review and is published here when it goes live.
| Vendor | Purpose | Region | Domain |
|---|---|---|---|
| Google Cloud Platform | Cloud infrastructure. Hosts all production workloads and customer data. | US regions | cloud.google.com |
| Google Workspace | Identity provider. SSO and authentication for the Vehicle AI team and integrated customer accounts. | US | admin.google.com |
| Vercel | Front-end deployment and edge serving for the marketing site. | Global edge | vercel.com |
| Vanta | Continuous security and compliance monitoring. Powers the live Trust Center and the SOC 2 controls. | US | vanta.com |
| GitHub | Version control and code review for the NEON platform. | US | github.com |
Walk through our security posturewith the team.
We will share the SOC 2 Type II report, walk through tenant isolation and audit logging on a live Command Center, and answer any security or compliance question you have.
No commitment·We do the setup·Your data stays yours