The fleet is the sensor.

Sign-in for a fleet’s drivers built so that the account and the person stay the same: multi-factor sign-in on an approved device, a fresh check at the start of each shift, and a lock when the same account appears somewhere it cannot plausibly be. Every sign-in and every lock is on the record.

• Multi-factor sign-in on an approved device
• A fresh check at the start of every shift
• Locked when the account appears somewhere it cannot plausibly be
• Every sign-in and lock on the record

A driver starts a shift at 06:00 on the phone the fleet approved, with a second factor. At 06:40 the same account tries to sign in on an unknown phone across the city. The attempt is refused and flagged, and the driver’s own session keeps working. The fleet manager calls the driver, who never shared the account, and the unknown phone is blocked for good.

A guidance layer built around that transition: continuous self-assessment of confidence, degradation that announces itself early, and a hand-back to the driver with enough warning to be useful rather than an alarm.

• Continuous self-assessment of confidence
• Degradation announced early, not at the boundary
• A hand-back with enough warning to be useful

On the motorway, assisted driving holds its lane with high confidence. Ahead, roadworks begin and the markings fade; the system’s confidence falls, and it shows it. Twelve seconds before the boundary it tells the driver to take over, early and calmly, before any alarm. The driver takes the wheel with four seconds to spare, and control is handed back before the system knows less than it thinks.

An allocation engine that solves vehicle to job against every constraint that matters at once — position, hours, vehicle class, customer window, price floor — and delivers the answer fast enough that it is still true when it arrives.

• Position, hours, vehicle class, customer window and price floor solved together
• Fast enough that the answer is still true on arrival
• Runs continuously against a working fleet
• Measured by how rarely a dispatcher overrides it

At 17:02 a booking lands: the airport at 17:30, six passengers with luggage. Every free vehicle is scored at once on position, hours left, class and the customer’s window. The nearest car has four seats, so a van four minutes further away is chosen. At 17:03 the dispatcher sees the choice and the reason, and lets it stand; the van arrives at 17:28, inside the window. The honest measure of quality is how rarely a dispatcher overrides it.

Every vehicle position, heading and history fused from unreliable signals into a picture accurate enough to settle a dispute, with geofences that fire when they should and routing computed against the road as it is today.

• Position, heading and history fused from unreliable signals
• Geofences that fire when they should and not when they should not
• Routing against the road as it is today, not as the map remembers it

At 10:14 a customer disputes a pickup: the car never came. The operator opens the trace. Position fused from the car’s GPS, the driver’s phone and the road network puts the car at the kerb from 10:02, inside the pickup geofence, with the driver’s call at 10:05. At 10:16 the operator shares the trace with the customer, and by 10:20 the dispute is settled with the record, not with an argument.

Dispatch for roadside assistance. The stranded driver gets a link that captures their exact position, the nearest suitable truck is matched on skills and equipment, and the driver sees it coming. If the car cannot be fixed on the spot, the tow and the onward journey are booked in the same flow.

• The exact position captured by a link, not described over the phone
• The nearest suitable truck matched on skills and equipment
• The driver sees the truck coming, with an honest arrival time
• Tow and onward journey booked in the same flow when a fix fails

A driver breaks down on a motorway at night and cannot say where. A link captures the position to within a few metres, on the right carriageway. The nearest truck carries no charger for an electric car, so the next one is sent. The driver watches it arrive in twenty-four minutes; the fault cannot be fixed on the spot, so a tow and a taxi home are booked before the patrol leaves.

Charging planned across the night for every vehicle in a depot: each one charged to what its first job needs, by the time it leaves, without the site ever drawing more than its grid connection allows. When a vehicle comes in late or a job changes, the plan re-solves.

• Every vehicle charged to what its first job needs
• The site kept under its grid connection all night
• Charging moved into the cheaper hours where the schedule allows
• A late arrival or a changed job re-solves the plan

Forty vans return to a depot between 18:00 and 19:00. Plugged in on arrival they would all draw at once and breach the connection. The plan staggers them through the night, filling the vans with the earliest routes first. At 23:10 van 17 is reassigned to a longer morning route; the plan raises its target and moves two others later. At 05:30 every van has what its first job needs, and the peak never passed the limit.

A voice and message agent that answers every call to the service department, books the slot against the workshop’s real capacity, arranges a courtesy car or a lift, and reminds the customer before the appointment. Questions about faults, safety, warranty or cost go to a service advisor.

• Every call answered, at any hour
• Slots booked against the workshop’s real capacity
• Courtesy car or a lift arranged with the booking
• Faults, safety, warranty and cost handed to an advisor

A customer calls at 19:40, after the service desk has closed, because a warning light has come on. The agent books the first free diagnostic slot, 08:30 the next morning, and a courtesy car for the day. When the customer asks whether it is safe to drive, the agent does not guess: it passes the question to the on-call advisor, who calls back within ten minutes.

Outreach for open recalls that works through a dealer’s own service records to reach the person driving the car today: by message, by phone and by letter, in their language, with the repair, the parts and a courtesy car booked in one step. Owners who cannot be reached are listed for the service team with the reason.

• Open recalls matched to the dealer’s own service records
• Owners reached by message, phone and letter, in their language
• Repair, parts and courtesy car booked in one step
• Owners who cannot be reached listed for the service team

A recall covers 1,200 vehicles sold by one dealer, many of them eight or more years old. The agent works through the dealer’s service records rather than the original sale, messages the owners it can reach and calls those who do not reply. Repairs are booked with the parts ordered, and every owner it could not reach is on the service team’s list with the reason.

Condition capture at every handover of a rental, a fleet car or a used car at sale: the same passes under the same conditions, compared with the last capture, so what is new is measured rather than guessed. A person decides any charge, and the customer sees the same evidence.

• The same capture at every handover, under the same conditions
• Compared with the last capture, so only new damage is flagged
• Reflections and dirt set aside before anything is called damage
• A person decides any charge; the customer sees the same evidence

A car comes back after a week’s rental and is captured again. A mark on the bonnet is flagged, then set aside: it was there at pickup, and a second angle shows a reflection, not a dent. A 4 cm scratch on the rear door is new. The desk agent reviews it with the customer on the same screen and decides the charge on evidence both of them can see.