How driver data is actually protected.

How the sensitive fields are actually protected

Field-level encryption

SSNs, driver license numbers and signatures are encrypted on the device itself before they're ever transmitted to cloud storage.

Encrypted backups

Administrative backups are encrypted with AES-256-GCM using a passphrase set by your organization's own administrator — whether the backup lives locally or in the cloud.

Transit & storage

Data in transit is protected with TLS; data at rest sits behind Firebase Firestore/Storage's security controls, with the device's native OS encryption protecting what's stored locally.

Access control

Role-Based Access Control (RBAC) restricts sensitive operations — like creating or restoring a backup — to authorized Owners, with biometric login available for admin access.

Tenant isolation

Each organization's data is isolated at the database rule level — one carrier's roster is never reachable from another's account.

What's collected, why, and who sees it

Permissions requested on-device: Camera (document scanning), Biometrics (secure administrative login) and Storage (saving generated PDFs locally). Data is owned by the organization that creates it — DPS does not sell or share it for marketing purposes. Full detail is in the Privacy Policy and SMS Consent pages.