The NCC Security Advantage

At NCC, security underlies every facet of how we do business, and we are laser-focused on maintaining top-notch security and compliance standards to provide dealerships with unparalleled protection from data breaches and 99.99% system uptime with the goal of never losing a sale due to security disruptions.

Stringent Security Reviews and Certifications

Third-Party Testing and Certifications

NCC proactively takes part in “White Hat” penetration tests where experienced, well-trained third-party security engineers rigorously test our cybersecurity defenses to identify any weaknesses not found in weekly vulnerability scans. NCC also regularly participates in multiple audits by credit bureaus, partners, and the FTC.

Server Updates and Fortifications

NCC conducts a monthly server patching program where servers are updated to the industry standard to ensure they are fortified against the most recent vulnerabilities.

Scanning and Monitoring

Weekly vulnerability scans proactively detect and address potential attack vectors to stay ahead of threats. In addition, NCC’s dedicated security team monitors its network 24 hours a day, every day of the year for intrusions and malicious activity, then manages those risks with speed.

Data Security Through Infrastructure and Encryption

NCC’s extensive security measures include a multi-segmented cloud infrastructure at its core; this data-center infrastructure is securely designed to prevent lateral movement by criminals who might manage to breach the many other risk-mitigation protocols already in place.

NCC uses state-of-the-art, government-level encryption to ensure Personally Identifiable Information (PII) is encrypted at every stage—whether in transit, at rest, or within the NCC database—guaranteeing consumer data is always protected.

Consumer Data is Always Encrypted

Strong Internal Security and Compliance Practices

Software developed for FCRA and GLBA compliance.

Comprehensive policies and processes to respond to security incidents.

Detailed disaster recovery plans tested every 6 months.

Annual, mandatory data security training for all employees.