U.S. COrporate Office
Asia CORPORATE OFFICE
Elixir Business Park
2nd Floor, Plot #15A, Sector 127
Noida, U.P. 201301, India
Secure Vault is a secure digital storage solution for sensitive customer documents
Documents uploaded by a customer are encrypted and backed up automatically while maintaining history. The current phase of Secure Vault is limited to customer Drivers License, Insurance, and a pre-auth using their Credit Card information.
The customer will be sent to the myKaarma Secure Vault webpage once a loaner is requested. The webpage will have following abilities:
After the web page is sent to the customer, the link is valid for 24 hours after which it will expire.
When customers request a loaner for a Pickup & Delivery service, documents are typically gathered in person, through email or even through insecure images sent via text message. These fragmented methods are both cumbersome and time-consuming. Secure Vault streamlines this process, allowing the dealer to acquire, view, and verify Drivers License, Insurance, and Credit Card information in a secure digital manner.
Customers can upload these documents into a secure digital storage location accessible through a webpage (similar to how myKaarma online payments allows customers to provide their credit card details today, without exposing the dealer to unnecessary liability). This new feature will:
Only authorized users at dealerships will be able to view and verify documents at the dealership within the myKaarma Application. This access will always be controlled by dealer management using permissions.
Secure Vault is built on the same secure foundations as the myKaarma online payments platform, using one of the strongest block ciphers available, 256-bit Advanced Encryption Standard (AES-256), to encrypt customer data at rest. During data transfer, information is secured using bank-level TLS public-key encryption. Finally, all access to the customer-facing website is provided using time-bound tokens, which expire in 24 hours to prevent unauthorized long-term access.