Reinventing the rental of premium vehicles

Identity verification with Didit KYC. Every customer is verified via Didit, a certified European provider, before any booking. ID document, liveness check, facial match, AML analysis, email and phone verification, and NFC reading on compatible documents. Data is encrypted-archived on Cloudflare R2 and access is restricted to the strict minimum (Supabase RLS deny-all + service role server-side only). No partner renter accepts an unverified customer.

Secure Stripe payments (PCI-DSS Level 1). All payments transit through Stripe, certified PCI-DSS Level 1 — the highest industry standard. Maloc never stores card numbers. Each PaymentIntent is server-revalidated (amount, currency, booking status) before confirmation, and every webhook is HMAC-SHA256 signed then verified by stripe.webhooks.constructEvent(). 3D Secure enabled by default on all European transactions.

Automated deposit €1,000 to €5,000. The deposit is pre-authorized on the customer's card at contract time — no checks, no transfers, no cash. The bank hold automatically releases the amount 7 days after vehicle return if the exit inspection is compliant. In case of dispute, a Maloc mediator decides within 48 hours based on timestamped photos of entry and exit inspections (12 mandatory angles + 5 inspection schemas signed by both parties, archived with SHA-256 hash).

Comprehensive insurance up to €250,000. Every vehicle in the Maloc catalog is covered by the renter's professional fleet insurance, with a minimum cap of €250,000 in civil liability and damages. Renters are professionals registered with the French commercial registry (RCS) — we verify the SIRET, K-bis extract, insurance certificate and professional vehicle registration of each vehicle before publication. In case of incident, a single point of contact: our support team handles the case end-to-end.