Audit log
Changes to leads, deals, tasks, and settings are recorded with who, what, and when. Owners and managers can filter by action, person, and date.
CASL send gatePIPEDALaw 25 data requests
Consent on record.
Audit-ready on demand.
The AutoLens CASL gate is one set of checks that every outbound text must pass. Every text, whether it comes from the AI or from a rep, passes the same checks: opt-out list, consent, quiet hours, and an identification footer. Each send records why it was allowed, so you can answer an audit question without calling a developer.
See the send gateSee how audit export works
Tooling, not a legal certification. Your consent practices still matter.
Tracked consent keywordsfr-CA / en-CA
STOP[EN]· honouredARRÊT[FR]· honouredDÉSABONNER[FR]· honouredHELP[EN]· routedAIDE[FR]· routedINFO[EN]· logged
Keyword actions are logged with UTC timestamp and contact record ID.
The send gate
Five checks on every text.
AI replies, price-drop alerts, and a rep typing in the inbox all go through the same rules. A message that fails a check is not sent, and the reason is logged.
- 01Opt-out list
Has this number opted out at your dealership? Checked in every format a phone number can be typed.
- 02Consent
Express consent for promotions. Implied consent when the buyer texted you first, valid for 6 months.
- 03Quiet hours
9am–9pm in the recipient’s own time zone, worked out from their area code. Replies to a live conversation go through.
- 04Identification
Promotions and texts you start carry your name, a contact link, and STOP instructions.
- 05Send and record
The message goes out with a record of why it was allowed: the consent basis, message type, and language.
Opt-outs
STOP means stop, in both languages.
Keywords are handled when the message arrives, before any AI is involved. CASL requires the acknowledgement, so it goes out even to someone with no consent on file.
- STOP, UNSUBSCRIBE, CANCEL, QUIT, END: suppressed instantly, before the AI sees the message
- ARRÊT and DÉSABONNER: suppressed, with the confirmation sent back in French
- Plain language counts too: “stop texting me” is treated as an opt-out
- HELP and AIDE get a canned help reply. INFO gets a bilingual one
- A buyer who opted out can’t be re-consented by texting you later
- Opt-outs apply across the whole dealership, whichever rep or number they texted
Audit & data requests
Answer the question without a developer.
PIPEDA and Quebec Law 25 give people the right to see and delete their data. These tools let an owner handle both from the dashboard.
CSV export
Export the audit rows you’ve filtered to a spreadsheet when someone asks for them.
Access requests
Export everything held about one lead (profile, messages, consent, deals, tasks) as one JSON file. A 30-day countdown tracks each request.
Erasure requests
Delete a lead and everything attached to it. Personal data is also scrubbed from the audit history, and a record that the erasure happened is kept.
Buyer self-service
Car buyers don’t have an account, so they can verify their phone or email with a one-time code and request their own data or deletion.
Retention
Old data is purged on a schedule. Opt-outs are never purged, because deleting one would let messages start again.
Straight answers
What it doesn’t do.
Worth knowing before you decide, not after.
- Certify you as compliant
AutoLens is the machinery, not a legal opinion. Whether you comply still depends on how your team captures consent.
- Canadian data hosting
Data is currently hosted in the US (Railway, US-East). This is disclosed in our privacy policy. A Canadian region is planned but has no date yet.
- Write your French marketing
French keyword replies are built in. There is no library of French marketing templates.
- Run your breach response
Notifying regulators and naming a privacy officer are your dealership’s obligations. We log security events, but we don’t file on your behalf.
Compliance you can show your lawyer.
The send gate, opt-out handling, audit log, and data-request tools are included on the Starter plan. Try it free for 7 days.
Design intent, not a third-party certification.