Built to be trusted with your hauler logins.
| portal button | Rover |
|---|---|
| Invoices, statements, accounts, services | read |
| Statement PDF download | read |
| Pay now | never clicked |
| Enroll in autopay | never clicked |
| Settings, profile, notifications | never clicked |
| Change password | never clicked |
Nine decisions in how Rover is built, each with what it means for you.
Nine design decisions
Saved steps only sign in, read and download. Rover is set up never to pay or change settings.
No surprise payments or changed accounts.
Passwords are encrypted with AES-256-GCM, bound to one portal and account, and opened only to sign in.
A leak of stored data does not expose passwords.
AI only sets up or repairs a portal and never sees passwords. Scheduled checks replay saved steps.
Predictable, repeatable results at lower cost.
A fix is kept only if it gets all the same data. The old version stays, and every fix is visible.
A portal redesign cannot silently corrupt your data.
Records are append-only, every version is kept, and each invoice keeps its original PDF.
A full audit trail, and what changed is always answerable.
An API key reaches only its own company's logins, records and documents. The API enforces it.
Your data is never visible to another customer.
Every webhook is signed with a timestamp, so it cannot be forged or replayed.
Your systems can trust what arrives.
If a portal asks for a one-time code or locks the account, Rover stops and waits for a person.
No account lockouts from guessing.
Failure messages come from a fixed list. Portal values and passwords stay out of logs.
Nothing sensitive sits in a log file.
What Rover keeps
- Portal logins
- Encrypted at rest and opened only inside the sign-in step.
- Saved steps
- How to check each portal, with every version and every fix.
- Records
- Accounts, invoices, locations, services and work orders, with every version, stored separately for each customer.
- Documents
- Statement and invoice PDFs as the portal served them, filed by content hash under your company.
- Check history
- What each scheduled check did and whether it succeeded. Scheduled checks use no AI.
Rover holds no security certifications yet, so this page claims none. Send your questionnaire through the contact page and we will answer it.
| moment | what happens |
|---|---|
| stored | password sealed with AES-256-GCM |
| bound to | this portal, this account, this field |
| Thu 02:00:01 | opened inside the sign-in step, typed into the login form |
| Thu 02:00:02 | signed in · value discarded |
| logs | step 01 · sign in · ok |
| AI model | never receives it |