Data security
How we protect your account and your clients’ data: isolation, login alerts, connected devices and legal compliance.
How we protect your data
Your service’s and your clients’ data are protected on several levels: from how they are stored to who logs into the account and from which device.
Below is a short overview of everything we do to keep your data secure.
Each service’s data is kept separate
Every auto service has its own data, isolated from all other services. A service can never see another service’s clients, cars or work orders.
All communication with the platform goes only over an encrypted connection (HTTPS).
Passwords and login
Passwords are stored only encrypted (hashed). Not even the Autosdesk team can see your password.
You can also log in with your Google account, which has its own protection.
Two-factor authentication (2FA)
With two-factor authentication, at login you enter your password and a 6-digit code from an authenticator app on your phone (Google Authenticator, Microsoft Authenticator, Authy). The code changes every 30 seconds.
If you prefer not to install an app, you can get the code on WhatsApp: add and confirm your phone number in My profile, then in Security choose “With WhatsApp code”.
So even if someone learns your password, they cannot get into the account without your phone. We recommend turning it on, especially if you own the service.
Turn it on from Profile → Security: scan the QR code with the app and enter the generated code. At the end you get recovery codes: keep them somewhere safe, they let you in if you lose your phone. Each code works only once.
Which method to choose? The authenticator app is the most secure: the code is generated on your phone, never travels over the network and works offline. The WhatsApp code is more convenient, but depends on your phone number and WhatsApp account.
The code is asked at every login, including after the session expires. It is one extra step, but every sign-in to the account is verified.
Turning it off is confirmed with your password, so nobody can weaken your account protection without you knowing. For the Autosdesk team, two-factor authentication is mandatory and cannot be turned off.
Alert on login from a new device
When someone logs into your account from a new device, you immediately get an email and an in-app notification with the device, IP address and time.
If it wasn’t you, change your password and log out the other devices from your profile.
Connected devices and remote logout
In your Profile you see how many and which devices are currently logged into your account (computer, phone, mobile app), with IP address and last activity.
You can log out a single device or all other devices at once. For safety, the action is confirmed with your password.
When you change your password, we automatically log you out on all other devices, including the mobile app.
Audit log
Every action in the account is recorded: who, what, when and from where. Actions taken by the Autosdesk team on a support request appear in the audit too. Details on the Audit page.
Where your data is stored
Data is hosted on tophost.md servers, physically in Chișinău, Republic of Moldova.
We automatically make daily backups of the whole database and files, kept for 14 days, plus separate backups for each auto service: daily, kept for 14 days, and monthly, kept for 6 months. All are kept in private storage and used only to restore data.
Your data belongs to you
You can export your service’s data at any time from Settings and request account deletion. Details on the Account deletion page.
Legal compliance
We process data in line with Moldova’s Law no. 195/2024 on personal data protection and keep working toward full alignment with the GDPR.
All the details are in the Privacy policy.