Encryption everywhere
TLS 1.3 for all traffic in transit and AES-256 for data at rest, with keys rotated on a fixed schedule.
Where a vehicle goes says a lot about the person driving it. Scarleicester is designed so that access is always lawful, minimal and accountable.
TLS 1.3 for all traffic in transit and AES-256 for data at rest, with keys rotated on a fixed schedule.
Each request is checked against an active consent grant. No grant, no data — enforced at the API, not in policy.
API keys are scoped to signals and fleets, can be restricted by IP and expire on the schedule you set.
SAML single sign-on, SCIM provisioning and granular roles keep workspace access tied to your directory.
Every read, export and remote command is logged with actor, time and scope, and can be exported for review.
Choose UK or EU hosting for stored telemetry. Data stays in the region you select.
We act as a processor for the vehicle data you collect and provide the tools you need to meet your own obligations.
A DPA with standard contractual clauses is available to every customer.
Export or erase everything linked to a driver or vehicle with a single API call.
Set retention per signal type. Expired data is deleted, not archived.
We never sell personal information to third parties.
Services run across multiple availability zones with automated failover and daily encrypted backups.
External penetration tests are carried out at least annually, and summaries are available under NDA.
Every change is peer reviewed, scanned for vulnerable dependencies and deployed through an audited pipeline.
Found something that doesn't look right? Email contact@scarleicester.com and we'll acknowledge within two working days. Uptime commitments are set out in our SLA.
Connect your first vehicles in a sandbox today, then go live when the data looks right.