Security
Where owner records come from
Owner names and addresses come from the DMV record a clerk attaches to a case after INF 1126. They are used for the notices the turned-on rule pack calls for. These pages do not take those records.
Who can open them
Outside a trial, an owner or lien clerk confirms with an authenticator before seeing those names or printing. A trial does not show the parties list. Counter does not open it.
How they are stored
Names and addresses entered on the case are encrypted in the application. Each record names its key version. The database and file storage are encrypted by the host.
Sessions
This browser signs out after 12 hours without use. Sign out of all devices is in Settings.
The log
The yard log only adds rows. A row cannot be changed or removed.
What leaves the yard
Mail, logs, and payment do not include owner names, addresses, license numbers, or the full VIN. The database host is Supabase. The app host is Vercel. Mail is sent by Resend. These pages do not collect payment. When a yard pays, Paddle is the merchant of record.
Passwords
A password has at least 12 characters and is refused when it matches a short list of leaked passwords kept in Packet Held. It is not sent out for a breach check.
Security reports
The contact for a security report is listed in /.well-known/security.txt. It points at this page. These pages do not publish an email address for that report.