Give every person exactly the access their job needs, across every store, and keep a record of who saw customer data. For detailed security controls and documentation, visit the Axion trust portal.
Roles and permissions down to the report
Control access by area and by action, for one store or many.
- System admin, dealer admin and regular user roles, with a permissions template applied when each user is created.
- Functional roles per dealership, such as accounting, general manager, sales manager, sales, service manager, service advisor, and more.
- Agency roles for Agency Hub, such as account manager, digital marketer, media buyer, SEO, design and email, plus agency teams that cover every store.
- More than 40 application areas, each set to none, read, write, delete or admin.
- Finer permissions for actions such as viewing each analytics report, exporting data, approving budgets and viewing customer contact details.
- Store-level admins who manage their own users without access to system tools or other stores.
- Bulk assignment of users to dealerships and groups, and directory-only contacts with no login for routing and mentions.
Sign-in and sessions
Strong sign-in without slowing people down.
- Email-based two-factor authentication, made mandatory role by role, with a remember-this-device option.
- Rotating, revocable sign-in tokens stored hashed; if a token is reused, the user is signed out.
- The web app locks after 60 minutes of inactivity, or 15 minutes for system administrators, and asks the person to sign in again, picking up where they left off.
- The mobile app locks after the same idle time and unlocks with biometrics or the password.
Customer data protection
Shopper contact details are hidden unless someone has a reason and the right to see them.
- Lead emails and phone numbers are masked everywhere in the platform.
- Revealing or exporting them requires a permission, and every reveal is written to the audit log.
- Audit logging on sensitive actions.
- Isolated SFTP accounts with intrusion blocking for inventory and data feed providers.

Groups, stores and services
Set each store up once and manage the group from the top.
- Dealer groups with group-level analytics and group-wide specials.
- A dealership profile with contacts, disclaimers, integrations, department hours, phone numbers, fees, vendors and URLs.
Admin tools you can delegate
Hand specific admin jobs to specific people without giving away full control.
- Inventory import and export, integrations, Google connections, OEM guidelines and window sticker features.
- Chart of accounts, benchmarks, parts categories and the knowledgebase.
- Each tool can be delegated on its own.
- System alerts emailed to admins when a problem occurs or repeats, at most once per alert type per day.
- Notification preferences for each person across in-app, email and push.
Frequently asked questions
How do I control what each employee can see across multiple dealerships?
Axion assigns system admin, dealer admin and regular user roles, plus functional roles per dealership such as sales manager, general manager, media buyer or SEO. More than 40 application areas can each be set to none, read, write, delete or admin, with finer permissions for actions like viewing each analytics report, exporting data and approving budgets.
Does Axion require two-factor authentication?
Axion supports email-based two-factor authentication that can be made mandatory role by role, with a remember-this-device option. Sign-in tokens rotate, are stored hashed and can be revoked, and if a token is reused the user is signed out. The web app locks after 60 minutes of inactivity, or 15 minutes for system administrators, and asks the person to sign in again, picking up where they left off. The mobile app locks after the same idle time and unlocks with biometrics or the password.
How does Axion protect customer contact data from dealership leads?
Axion masks lead emails and phone numbers everywhere in the platform. Revealing or exporting them requires a specific permission, and every reveal is written to the audit log. Inventory and data feed providers connect through isolated SFTP accounts with intrusion blocking.
Can a single store’s manager administer their own users without seeing other stores?
Yes. Axion supports store-level admins who manage their own users without access to system tools or other stores. Specific admin tools, such as integrations or the chart of accounts, can each be delegated on their own to the people who need them.
Map Axion to your stores and teams
We’ll show how roles, permissions and audit logs would work across your rooftops and partners.
