Sold over text, filed in an inbox: the real risk of a deal that lives across five apps

Nobody sets out to build an insecure filing system. It happens one convenient shortcut at a time. A customer's in a hurry, so their licence gets photographed and texted instead of scanned. A disclosure needs a signature, so it gets emailed as a PDF because that's what's open on the screen. A deposit comes in, and the confirmation is a screenshot from a banking app, saved wherever screenshots get saved. None of these are bad decisions in isolation. Together, they add up to a single customer's sensitive information — name, address, licence number, signature, sometimes financial details — sitting across a personal phone, a shared inbox, and a messaging app, none of which were built to be a secure business record.

What actually ends up scattered

A single deal, handled this way, can leave a trail like:

• A driver's licence photo in a phone's camera roll or a text thread.
• A signed disclosure PDF in an email inbox, possibly the same inbox used for personal email.
• A financing application forwarded back and forth with a lender contact.
• A deposit or payment confirmation as a banking app screenshot.
• The actual bill of sale and remaining paperwork in a physical folder.

Five locations, none of them designed for records retention, none of them backed up in a way anyone's actually checked, and no single person or system responsible for making sure all five pieces are still there in six months.

Why this is a bigger deal than it feels like day to day

Handled one deal at a time, this never feels risky — it's just the fast way to get a document from a customer's phone to yours. The risk compounds because it's the default for every deal, which means over a year, a small lot can have dozens of customers' personal documents scattered across personal devices with no central record of what exists, where, or whether it's still there. Two things make that a genuine problem rather than just untidy:

Retrievability. Ontario dealers are required to keep organized, complete deal records — six years under O. Reg. 333/08— and OMVIC's Electronic Record-Keeping Guideline expects records to be secure and readily producible. A document that only exists as a text message on a phone that's since been replaced doesn't meet that bar, even if nobody intended to lose it.

Exposure. A driver's licence and signed disclosure sitting in a personal text thread is exposed to whatever happens to that phone — lost, stolen, sold, or simply handed to a family member to play a game on. That's personal information belonging to a customer who trusted the dealership with it, sitting somewhere far less controlled than the dealership itself.

This isn't about blame — it's about defaults

Every dealer doing this is doing what's fastest with the tools available. The texting and emailing aren't a discipline failure — they're the default when there's no purpose-built alternative that's just as fast. That's the actual bar a better system has to clear: not more secure in theory, but faster or as fast in practice, so it becomes the default instead of the extra step.

A system where a customer's document gets captured directly — photographed once, into a private, deal-specific file — and never needs to touch a personal phone's camera roll or a shared inbox at all removes the scattering by removing the reason it happens. That's the model behind Lot Jacket: every deal has one file, documents stored privately and walled off between dealers, and nothing that has to live in a text thread to be fast. If you want to see how document capture actually works end to end, book a free 15-minute demo.