diff --git a/services/nginx/app/objects/customer_default_driver_template_o.php b/services/nginx/app/objects/customer_default_driver_template_o.php
new file mode 100644
index 00000000..4c206b9d
--- /dev/null
+++ b/services/nginx/app/objects/customer_default_driver_template_o.php
@@ -0,0 +1,139 @@
+<?php
+
+namespace objects;
+
+use classes\db;
+use classes\object_property;
+use classes\subuser_permission_templates_service;
+use Exception;
+use traits\db_object_t;
+
+class customer_default_driver_template_o extends db
+{
+    use db_object_t;
+
+    public object_property $customer_number;
+    public object_property $template_key;
+    public object_property $created_at;
+    public object_property $updated_at;
+
+    /**
+     * Convert the object to an array.
+     * @return array
+     * @throws Exception If the object is not selected
+     */
+    public function asArray(): array
+    {
+        self::requireSelected();
+        return [
+            'id' => (int)$this->id,
+            'customer_number' => (int)$this->customer_number->value(),
+            'template_key' => (string)$this->template_key->value(),
+            'created_at' => (string)$this->created_at->value(),
+            'updated_at' => (string)$this->updated_at->value(),
+        ];
+    }
+
+    /**
+     * @throws Exception If the creation of the object fails
+     */
+    public function add(int $customer_number, string $template_key): void
+    {
+        $normalized = (new subuser_permission_templates_service())->normalizeTemplateKey($template_key);
+        if ($normalized === null || $normalized === subuser_permission_templates_service::TEMPLATE_CUSTOM) {
+            throw new \InvalidArgumentException('Unknown driver access template.');
+        }
+        $tmp_id = self::add_object([
+            'customer_number' => (int)$customer_number,
+            'template_key' => $normalized,
+        ]);
+        self::select((int)$tmp_id);
+        self::objectChanged();
+    }
+
+    public function update(int $customer_number, string $template_key): void
+    {
+        $normalized = (new subuser_permission_templates_service())->normalizeTemplateKey($template_key);
+        if ($normalized === null || $normalized === subuser_permission_templates_service::TEMPLATE_CUSTOM) {
+            throw new \InvalidArgumentException('Unknown driver access template.');
+        }
+        if (!$this->doesUserHaveDefaultTemplate($customer_number)) {
+            $this->add($customer_number, $normalized);
+            return;
+        }
+        $this->selectByCustomerNumber($customer_number);
+        self::update_object((int)$this->id, [
+            'template_key' => $normalized,
+        ]);
+        self::select((int)$this->id);
+        self::objectChanged();
+    }
+
+    public function objectChanged(): void
+    {
+        // No cache layer for this object.
+    }
+
+    public function structure(): void
+    {
+        $this->setTable('customer_default_driver_template');
+    }
+
+    public function getObjectProperties(): void
+    {
+        $this->customer_number = new object_property($this->table, $this->id, 'customer_number', 'int', true);
+        $this->template_key = new object_property($this->table, $this->id, 'template_key', 'string', true);
+        $this->created_at = new object_property($this->table, $this->id, 'created_at', 'timestamp', true);
+        $this->updated_at = new object_property($this->table, $this->id, 'updated_at', 'timestamp', true);
+    }
+
+    public function getDefaultTemplate(int $customer_number): ?string
+    {
+        if (!$this->doesUserHaveDefaultTemplate($customer_number)) {
+            return null;
+        }
+        $this->selectByCustomerNumber($customer_number);
+        if ($this->exists()) {
+            return (string)$this->template_key->value();
+        }
+        return null;
+    }
+
+    public function doesUserHaveDefaultTemplate(int $customer_number): bool
+    {
+        return $this->getIdByCustomerNumber($customer_number) !== null;
+    }
+
+    public function getIdByCustomerNumber(int $customer_number): ?int
+    {
+        $matches = self::getFieldsWhere([
+            'customer_number' => (int)$customer_number,
+        ], [
+            'id'
+        ]);
+        if (count($matches) > 0) {
+            return (int)$matches[0]['id'];
+        }
+        return null;
+    }
+
+    public function selectByCustomerNumber(int $customer_number): ?customer_default_driver_template_o
+    {
+        $id = $this->getIdByCustomerNumber($customer_number);
+        if ($id === null) {
+            return null;
+        }
+        $this->select($id);
+        if ($this->exists()) {
+            return $this;
+        }
+        throw new Exception('Unable to select customer default driver template for customer number: ' . $customer_number);
+    }
+
+    public function delete(): void
+    {
+        self::requireSelected();
+        self::delete_object((int)$this->id);
+        self::objectChanged();
+    }
+}
diff --git a/services/nginx/app/routes/customerDefaultDriverTemplateRoute.php b/services/nginx/app/routes/customerDefaultDriverTemplateRoute.php
new file mode 100644
index 00000000..518fcf0f
--- /dev/null
+++ b/services/nginx/app/routes/customerDefaultDriverTemplateRoute.php
@@ -0,0 +1,169 @@
+<?php
+
+namespace routes;
+
+use classes\authentication;
+use classes\subuser_permission_templates_service;
+use objects\customer_default_driver_template_o;
+use objects\logs_o;
+use objects\users_o;
+use traits\route_t;
+
+class customerDefaultDriverTemplateRoute
+{
+    use route_t;
+
+    public function run(): void
+    {
+        $this->get('/customer/default-driver-template', function () {
+            global $response;
+            $this->requirePermission('get_customer_default_driver_template');
+            $user = (new authentication())->get_user();
+            $subuser = (new authentication())->get_subuser();
+            $customer_number = $this->resolveCustomerNumberForRead($user, $subuser);
+            $templateKey = (new customer_default_driver_template_o())->getDefaultTemplate((int)$customer_number);
+            if ($templateKey === null) {
+                $response->success([
+                    'customer_number' => (int)$customer_number,
+                    'template_key' => null,
+                ]);
+                return;
+            }
+            $response->success([
+                'customer_number' => (int)$customer_number,
+                'template_key' => $templateKey,
+            ]);
+        }, [
+            'get_customer_default_driver_template' => 'Get the default driver access template for a customer (own or, with extended permission, other customers).',
+        ]);
+
+        $this->put('/customer/default-driver-template', function () {
+            global $response;
+            $this->requirePermission('edit_customer_default_driver_template');
+            $user = (new authentication())->get_user();
+            $subuser = (new authentication())->get_subuser();
+            $customer_number = $this->resolveCustomerNumberForWrite($user, $subuser);
+
+            self::requireParameters(['template_key']);
+            $templateKey = (string)self::getParameter('template_key');
+            self::requireType($templateKey, self::type_string());
+            self::requireMinLength('template_key', 1);
+            self::requireMaxLength('template_key', 64);
+
+            $service = new subuser_permission_templates_service();
+            $normalized = $service->normalizeTemplateKey($templateKey);
+            if ($normalized === null || $normalized === subuser_permission_templates_service::TEMPLATE_CUSTOM) {
+                $response->error('Unknown driver access template.', 400);
+            }
+
+            $customer = (new users_o())->getUserByCustomerNumber((int)$customer_number);
+            if (!$customer->exists()) {
+                $response->error('Customer not found', 400);
+            }
+
+            $templateObject = new customer_default_driver_template_o();
+            $templateObject->update((int)$customer_number, $normalized);
+
+            $actor_id = $user !== false ? (int)$user->id : ($subuser !== false ? (int)$subuser->id : 0);
+            (new logs_o())->add('customer_default_driver_template', 'global', 1, $actor_id, 'UPDATE_CUSTOMER_DEFAULT_DRIVER_TEMPLATE', 'Default driver template set to ' . $normalized);
+
+            $response->success($templateObject->asArray());
+        }, [
+            'edit_customer_default_driver_template' => 'Edit the default driver access template for a customer (own or, with extended permission, other customers).',
+        ]);
+
+        $this->delete('/customer/default-driver-template', function () {
+            global $response;
+            $this->requirePermission('delete_customer_default_driver_template');
+            $user = (new authentication())->get_user();
+            $subuser = (new authentication())->get_subuser();
+            $customer_number = $this->resolveCustomerNumberForWrite($user, $subuser);
+
+            $templateObject = new customer_default_driver_template_o();
+            if (!$templateObject->doesUserHaveDefaultTemplate((int)$customer_number)) {
+                $response->error('This customer does not have a default driver template', 400);
+            }
+            $templateObject->selectByCustomerNumber((int)$customer_number);
+            $templateObject->delete();
+
+            $actor_id = $user !== false ? (int)$user->id : ($subuser !== false ? (int)$subuser->id : 0);
+            (new logs_o())->add('customer_default_driver_template', 'global', 1, $actor_id, 'DELETE_CUSTOMER_DEFAULT_DRIVER_TEMPLATE', 'Default driver template removed');
+
+            $response->success('Default driver template deleted');
+        }, [
+            'delete_customer_default_driver_template' => 'Delete the default driver access template for a customer (own or, with extended permission, other customers).',
+        ]);
+    }
+
+    /**
+     * @param users_o|false $user
+     * @param \objects\subusers_o|false $subuser
+     */
+    private function resolveCustomerNumberForRead($user, $subuser): int
+    {
+        global $response;
+        $customer_number = $this->customerNumberFromRequest();
+        if ($subuser !== false) {
+            $subuserCustomer = (int)$subuser->customer_number_target->value();
+            if ($subuserCustomer <= 0 || $subuserCustomer !== $customer_number) {
+                $response->error('Unauthorized', 401);
+            }
+            return $customer_number;
+        }
+        if ($user === false) {
+            $response->error('Invalid session', 400);
+        }
+        if ((int)$user->customer_number->value() !== $customer_number) {
+            $this->requirePermission('get_customer_default_driver_template_other');
+        }
+        return $customer_number;
+    }
+
+    /**
+     * @param users_o|false $user
+     * @param \objects\subusers_o|false $subuser
+     */
+    private function resolveCustomerNumberForWrite($user, $subuser): int
+    {
+        global $response;
+        $customer_number = $this->customerNumberFromRequest();
+        if ($subuser !== false) {
+            $subuserCustomer = (int)$subuser->customer_number_target->value();
+            if ($subuserCustomer <= 0 || $subuserCustomer !== $customer_number) {
+                $response->error('Unauthorized', 401);
+            }
+            return $customer_number;
+        }
+        if ($user === false) {
+            $response->error('Invalid session', 400);
+        }
+        if ((int)$user->customer_number->value() !== $customer_number) {
+            $this->requirePermission('edit_customer_default_driver_template_other');
+        }
+        return $customer_number;
+    }
+
+    private function customerNumberFromRequest(): int
+    {
+        global $response;
+        if (self::isParametersSet(['customer_number'])) {
+            self::requireParameters(['customer_number']);
+            $customer_number = (int)self::getParameter('customer_number');
+        } else {
+            $auth = new authentication();
+            $user = $auth->get_user();
+            $subuser = $auth->get_subuser();
+            if ($user !== false) {
+                $customer_number = (int)$user->customer_number->value();
+            } elseif ($subuser !== false) {
+                $customer_number = (int)$subuser->customer_number_target->value();
+            } else {
+                $response->error('Invalid session', 400);
+            }
+        }
+        if ($customer_number <= 0) {
+            $response->error('Invalid customer number', 400);
+        }
+        return $customer_number;
+    }
+}
diff --git a/services/nginx/app/tests/customer/CustomerDefaultDriverTemplateRouteTest.php b/services/nginx/app/tests/customer/CustomerDefaultDriverTemplateRouteTest.php
new file mode 100644
index 00000000..bbd63519
--- /dev/null
+++ b/services/nginx/app/tests/customer/CustomerDefaultDriverTemplateRouteTest.php
@@ -0,0 +1,71 @@
+<?php
+
+if (!defined('WD')) {
+    define('WD', dirname(__DIR__, 2));
+}
+
+function ok($message): void { echo "\n\033[32m✔ $message\033[0m\n"; }
+function fail($message): void { echo "\n\033[31m✖ $message\033[0m\n"; exit(1); }
+
+$requiredFiles = [
+    WD . '/routes/customerDefaultDriverTemplateRoute.php',
+    WD . '/objects/customer_default_driver_template_o.php',
+];
+
+foreach ($requiredFiles as $requiredFile) {
+    if (!file_exists($requiredFile)) {
+        fail('Required file missing: ' . $requiredFile);
+    }
+}
+
+$routeCode = file_get_contents(WD . '/routes/customerDefaultDriverTemplateRoute.php');
+$objectCode = file_get_contents(WD . '/objects/customer_default_driver_template_o.php');
+
+if ($routeCode === false || $objectCode === false) {
+    fail('Unable to read new customer default driver template source files');
+}
+
+$assertContains = static function (string $haystack, string $needle, string $message): void {
+    if (strpos($haystack, $needle) === false) {
+        fail($message);
+    }
+};
+
+$assertContains($routeCode, "'/customer/default-driver-template'", 'Route should register the /customer/default-driver-template endpoint');
+$assertContains($routeCode, "requirePermission('get_customer_default_driver_template')", 'GET endpoint should require get_customer_default_driver_template permission');
+$assertContains($routeCode, "requirePermission('edit_customer_default_driver_template')", 'PUT endpoint should require edit_customer_default_driver_template permission');
+$assertContains($routeCode, "requirePermission('delete_customer_default_driver_template')", 'DELETE endpoint should require delete_customer_default_driver_template permission');
+$assertContains($routeCode, 'subuser_permission_templates_service', 'Route should reuse the existing template service for validation');
+$assertContains($routeCode, 'TEMPLATE_CUSTOM', 'Route should reject custom template keys to avoid bypassing template logic');
+
+$assertContains($objectCode, "setTable('customer_default_driver_template')", 'Object should map to customer_default_driver_template table');
+$assertContains($objectCode, 'customer_number', 'Object should expose customer_number property');
+$assertContains($objectCode, 'template_key', 'Object should expose template_key property');
+$assertContains($objectCode, 'doesUserHaveDefaultTemplate', 'Object should provide doesUserHaveDefaultTemplate helper');
+$assertContains($objectCode, 'getDefaultTemplate', 'Object should provide getDefaultTemplate helper');
+$assertContains($objectCode, 'update(', 'Object should provide an update() method for upserts');
+$assertContains($objectCode, 'selectByCustomerNumber', 'Object should provide selectByCustomerNumber helper');
+$assertContains($objectCode, 'delete(', 'Object should provide a delete() method for removal');
+
+// Sanity: the route must surface 5 main permission groups in the access model
+// (TRU-89 requests 5 toggles in the customer portal "tilladelser" tab).
+$templateServiceFile = WD . '/classes/subuser_permission_templates_service.php';
+if (!file_exists($templateServiceFile)) {
+    fail('subuser_permission_templates_service.php not found');
+}
+$templateServiceCode = preg_replace('/\s+/', ' ', file_get_contents($templateServiceFile));
+$expectedGroups = ['vehicles', 'selfserve', 'bookings', 'orders', 'driver_management'];
+foreach ($expectedGroups as $expectedGroup) {
+    if (strpos($templateServiceCode, "'$expectedGroup'") === false) {
+        fail('Expected permission group missing from template service: ' . $expectedGroup);
+    }
+}
+if (strpos($templateServiceCode, "GROUP_ORDER") === false) {
+    fail('Template service is missing the GROUP_ORDER definition');
+}
+
+ok('Customer default driver template route registers all CRUD endpoints and validates templates');
+ok('Object exposes the required persistence helpers and maps to the right table');
+ok('Template service still defines the 5 permission groups required for the kunde portal "tilladelser" tab');
+
+echo "\nCustomerDefaultDriverTemplateRouteTest completed.\n";