Enterprise foundation
Enterprise-ready security and privacy.
Connecting national CRM data with dealer systems requires a high level of trust. WEBSOLVE operates an information security management system certified to ISO/IEC 27001 and a privacy information management system certified to ISO/IEC 27701. This gives NSCs an independently assessed governance framework for the secure and privacy-conscious handling of customer and vehicle data across the retail network. GDPR requirements are embedded in our operations and product development.
Why it matters
Large National Sales Companies entrust software suppliers with customer data, vehicle data and connections to business-critical systems. Information security and privacy management are therefore part of our proposition, not an afterthought. They demonstrate that WEBSOLVE can operate within the governance standards expected by major automotive organisations.
Certified management systems
- ISO/IEC 27001:2022 – information security management system. Issued by TÜV NORD Nederland B.V., first certified on 17 December 2020 and subject to annual evaluation. Scope: information security related to developing and providing software for the purpose of integrating information systems to support digital customer communication within the automotive retail sector.
- ISO/IEC 27701:2019 – privacy information management system, extending the ISO/IEC 27001 system with privacy-specific controls for WEBSOLVE in the role of PII processor. Issued by TÜV NORD Nederland B.V. as an addition to the ISO/IEC 27001 certificate, first certified on 29 February 2024 and subject to annual evaluation. Scope: processing of personal data related to developing and providing software for the purpose of integrating information systems to support digital customer communication within the automotive retail sector, in the role of PII processor.
Certificates and scope statements are available on request and during vendor due diligence.
Privacy governance
- Privacy and GDPR requirements are embedded in operational and product governance, from design through to day-to-day operations.
- An independent Data Protection Officer oversees our processing activities and is the point of contact for supervisory authorities and data subjects.
- Data processing agreements, sub-processor lists and records of processing are maintained for every enterprise customer.
Enterprise documentation
For procurement, security and legal teams we provide documented security, privacy and data-processing arrangements, including:
- security policies and control summaries,
- data processing agreement and sub-processor overview,
- data flow descriptions for CRM and dealer-system integrations,
- incident response and business continuity summaries,
- answers to standard vendor security questionnaires.
Request the documentation via security@websolve.com.
Reporting a security concern
If you believe you have found a security vulnerability in a WEBSOLVE system, please report it to security@websolve.com. We will acknowledge your report, investigate it and keep you informed. We ask that you do not access or modify data that is not yours and that you give us reasonable time to respond before any disclosure.
Data subject requests
Individuals who want to exercise their rights under data protection law should start with our privacy statement, which explains what we process on this website. Our Data Protection Officer can be reached at privacy@websolve.com. For data processed on behalf of an NSC or dealer, the brand or dealer is the controller and the first point of contact; we support them in responding.
Preparing a vendor assessment or procurement review?
We are used to enterprise due diligence. Tell us what your process needs and we will provide the documentation and the right people.
Discuss your challengeA 30-minute conversation with a senior specialist.