Trust Portal
AutoFi’s cloud-based Software as a Service (SaaS) platform connects car auto dealers, lenders and OEMs to help facilitate the purchase of a car. The Platform powers vehicle financing for consumer purchasing or leasing from marketplaces, car dealers and aggregators.
AutoFi's platform was built with security and privacy in mind. We go the extra mile to ensure your data is secure and protected at every layer of the service stack.
Subprocessors
Trust Portal Updates
Security Advisory: PHP2Shell Vulnerability
AutoFi is aware of the recently disclosed PHP2Shell vulnerabilities (CVE-2026-109618 and CVE-2026-109619), which may allow remote code execution in affected PHP environments.
Following an assessment of our technology environment, we have confirmed that AutoFi's customer-facing and consumer-facing services are not impacted by these vulnerabilities.
No remediation actions are required for our customer-facing or consumer-facing services in relation to PHP2Shell, and there is no action required from our customers.
Protecting our customers and their data remains a top priority. Our Information Security and Technology teams continue to monitor emerging threats, assess potential exposure, and take appropriate action to maintain the security of our platform.
AutoFi Information Security
Office of the CISO