Tool data is business data: who had what and when, what it costs, which customer jobs belong to it. Tulz treats it accordingly – with passkey sign-in, roles and rights, a log that records every change, and servers in Germany.
What is not needed is not stored: no advertising, no tracking, only the cookies required for sign-in and security. Former employees are anonymised, the GDPR data disclosure comes at the push of a button.
How it works in the workshop
- Sign in – with password or passkey (fingerprint, face, security key); Microsoft 365 and Google Workspace can be connected (Signing in with a passkey).
- Warning on anything unusual – if an account signs in on an unknown device, a warning e-mail goes out; known devices can be viewed and removed in the profile.
- Grant rights – roles, site binding, lending rules (Roles and rights).
- Trace – the log shows every change with name and time; entries can be copied and handed to support (Log).
What comes with it
- Credentials for shops, brokers and services are stored encrypted in the database
- Password confirmation before sensitive actions, automatic sign-out after inactivity, lock after failed attempts
- Passwords are checked against lists of known leaked passwords
- Data disclosure and anonymisation under GDPR (Data disclosure)
- Download all data – as an export with everything that belongs to the workshop (Downloading data)
- Regular security reviews of the software, documented in the release notes (Security)
Who it is for
Every business – and especially franchised dealers whose manufacturer audits ask about data protection and access control.
Frequently asked questions
Where is my data?
On servers in Germany. The provider makes backups; in addition you can download a complete export at any time.
What is a passkey?
A sign-in without a password: the device confirms with fingerprint or face, the secret key stays on the device. Phishing goes nowhere with it.
Can support look into my workshop?
Only if you grant it – time-limited, read only or change as well, and every access is in the log by name.