Skip to main content

How Aptiv Keeps Qualifier Customer Data Separate and Secure

At Aptiv, we prioritize the security and privacy of customer data within Qualifier. This article details how we keep customer data separate and secure.

Aptiv best practices​

Aptiv prioritizes security and privacy by adhering to these industry best practices:

  • Continuous IT infrastructure monitoring: We constantly monitor our systems to detect and respond to potential threats in real-time.
  • Data encryption: All data, both in transit and at rest, is encrypted using advanced protocols.
  • Malware protection: Aptiv systems have robust malware protection to prevent unauthorized access and data breaches.
  • Routine risk assessments and penetration testing: Regular assessments and penetration testing help us identify and mitigate vulnerabilities promptly.
  • Timely patching: Aptiv developers respond swiftly to patch any identified vulnerabilities to maintain system security.

Aptiv maintains a Report a Vulnerability contact page to ensure reported security exposures are addressed immediately.

Server data security​

Aptiv stores data on servers located in the US, China, and the EU, complying with regional privacy and security regulations, including GDPR.

Additional server data security measures include the following:

  • Separate databases: Each customer organization has its own database where proprietary data is stored.
  • Unique access URLs: Different organizations access Qualifier through unique URLs, preventing accidental data access by other Aptiv clients.

User authentication and access control​

Qualifier provides robust user management features to control organizational access levels, ensuring the right people see the right data:

  • Access levels: Users are grouped into access levels, with customizable permissions.
  • Admin controls: Designated admins can manage employee accounts, assign access levels, and restrict content and features.
  • Customization: Access levels can be customized to limit data visibility based on user roles. For example, administrators can restrict which features, fleets, vehicle packages (body/engine/transmission), vehicle modules, and DTCs—to name a few—that different users can see.

Data encryption​

Aptiv ensures encryption throughout the entire Qualifier system:

  • In transit: Data is transmitted using secure protocols like HTTPS and SSH/SFTP.
  • At rest: Data is encrypted using 256-bit Advanced Encryption Standard (AES-256).

Hardware security​

Best security practices include safeguarding customer data at the point of collection within vehicles. Access to data on Aptiv vehicle data recorders (VDRs) is tightly controlled:

  • Device Authentication: Aptiv VDRs use a static client certificate issued by a certificate authority (CA) to identify themselves to the server. Aptiv operations teams can revoke these certificates and security keys to prevent devices from connecting to the server if necessary.
  • Proprietary Binary Format: Data on VDRs is encoded in a proprietary format for added security.
  • Enhanced Security Chips: Our latest VDR, the EP-2000, offers additional protection against tampering via an integrated security chip.

Audit logs​

Aptiv maintains comprehensive audit logs for security purposes:

  • Tamper-proof logs: Actions by both human and automated systems are logged immutably by our cloud service providers.
  • Application logs: Qualifier also logs user actions for security auditing and to allow administrators to monitor application use.

Through these security measures, Aptiv ensures that your Qualifier data remains secure and private.

Questions?​

We're here to help! Contact your designated Aptiv representative or email qualifier@aptivcs.com