The ghost employees in your dealership.

Active accounts in CDK, OEM portals, RouteOne, and your M365 tenant. Belonging to people who left months ago. StitchOps finds them. Then closes them.

StitchOps workflow removing a departing sales associate from FMC Dealer, STARS, CallRevu, Gas Shell, 3CX Extension, and DealerConnect automatically

Already in the StitchOps dealer catalog.

CDK Unity. Tekion. DealerConnect. KDealer. Saturn. DealerTrack. Route One. FMC Dealer. DNS Lincoln Valet. AutoAlert. Call-Revu. Rapid Recon. RedCap Service Suite. V-Auto. Matador.ai. Fullpath. Volie. I-Packet. DealerDMV. UTA. TSD. KPA. RockED. Microsoft O365. PayCor. Authorize.net. Open Edge. Ocean Bank. Yooz. GoTo Phones.

30+

Dealer integrations live in the catalog

91%

Of enterprise systems have no usable API

100%

System surface coverage with StitchOps

Your offboarding is leakier than you think.

01

Departures don't get reported.

A sales advisor leaves on Friday. The general manager forgets to file the form. HR finds out three weeks later. The DMS account is still live. So is the OEM portal. So is the lender portal.

02

No system shares an identifier.

Same person. Four usernames. Zero common keys between CDK, your OEM portal, RouteOne, and Active Directory. Manual reconciliation across 110 rooftops is a project, not a process.

03

Audit season eats your team.

FTC Safeguards reviews. Red Flags reviews. State DMV requirements. Today these are spreadsheet exercises that take a week per rooftop. There is a better way.

Pay to find. Pay again only if you choose to fix.

01

Discovery Report: $10 per run

One end-to-end reconciliation across every connected system. Surfaces dormant accounts, unauthorized OEM access, signature gaps, elevated privilege issues. Runs monthly or on demand.

02

Remediated Finding: $8 per resolution

One discrete condition, brought to a resolved state across all connected systems. Cross-system identity reconciliation included. Billed only when resolution completes.

$10
Per Discovery Report run
$8
Per Remediated Finding
$0
Platform fee. Minimum. Idle charge.

What this looks like for a 110 rooftop group.

A 3,000 employee, 110 rooftop dealer group runs Discovery Reports monthly across CDK, M365, their OEM portals, RouteOne, and DealerSocket. Each run is $10. Remediation activates only when the customer says go. They pay $8 to close each ghost account, each unauthorized OEM session, each signature gap. Their previous access review took three FTEs and ran twice a year. StitchOps runs monthly and finishes in hours.

3,000
Employees
110
Rooftops
2x
Previous review frequency per year
StitchOps data collections dashboard showing connected dealer systems and governance metrics

What we find. What we close.

01

Ghost employees with live DMS access

Departed staff still active in CDK, Reynolds, or Tekion. Sometimes for months. Sometimes longer.

02

Unauthorized OEM portal access

Former managers, techs, and finance staff still logging into Subaru OWL, Ford FMC Dealer, Toyota Dealer Daily, GM Global Connect, or Stellantis DealerCONNECT.

03

Lender portal account hygiene

RouteOne, Dealertrack, and captive lender portals accumulate accounts faster than dealers retire them.

04

FTC Safeguards and Red Flags audits

Signature gap detection on required acknowledgments. Audit-ready reports across every rooftop on demand.

05

Elevated privilege reviews

Who has admin rights across the DMS, finance systems, and OEM portals. Reconciled monthly, not annually.

06

New hire provisioning

DMS account. OEM portal. F&I tools. CRM. Email. Active Directory. One workflow. $5 per onboard.

Audit-ready by design.

FTC Safeguards Rule. Red Flags Rule. OFAC. State DMV requirements. SOC 2 controls for public dealer groups. StitchOps generates the documentation auditors ask for without manual collection.

SOC 2

Type I and II certified

BYOKV

Credentials never leave your vault

ISO

27001 aligned

Where StitchOps sits in your stack.

01

Identity Layer

Okta, Auth0, Entra, Active Directory. Issues tokens. Answers who is allowed to do what.

02

API Runtime

Covers apps with APIs. About 9% of the dealer stack. The other 91% has no usable API.

03

Execution Runtime: StitchOps

CDK. OEM portals. RouteOne. DealerSocket. M365. Active Directory. The 91% where no API exists.

Built for enterprise. Backed by enterprise infrastructure.

SOC 2

Type I and II certified

110

Rooftop dealer group in production

BYOKV

Partner-grade credential security

Show us your dealership. We will show you the ghost employees.

A 30 minute call. We map your systems to a Discovery Report scope. You decide what to run. Thomas Bieser, Co-Founder and CEO. [email protected].