Can an auto dealership license its business records to AI companies?
Possibly, for operating records such as service department repair orders, warranty claim handling, parts and reconditioning decisions, with customer and vehicle identifiers removed. Customer financing and leasing information is protected under federal rules that apply to most dealers, so it stays out entirely.
What systems does a dealership usually run on?
Dealerships run on a dealer management system (DMS), the central software that ties sales, service, parts and accounting together. CDK Global, one DMS vendor, describes its system as letting dealers watch their whole operation from one interface and track money with audit trails, and it sells finance and insurance, parts and customer relationship tools alongside it.
Around the DMS, dealers typically use a CRM (customer relationship management software) for leads and follow-up, a desking tool for working out deals, manufacturer portals for warranty and parts, used-vehicle appraisal tools, and email, texting and phone systems.
- DMS: deals, repair orders, parts, accounting
- CRM and business development center (BDC) lead records
- Finance and insurance (F&I) records
- Manufacturer warranty and parts portals
- Used-vehicle appraisal and reconditioning records
- CheckAre these records your company's own?
Records you create running your business usually are. Data you hold for customers, under their contracts, often is not.
- CheckDo contracts or NDAs restrict use?
Customer, supplier and partner agreements can bar sharing even de-identified material. Read them, or have counsel read them.
- CheckDo they contain personal data?
Employee and customer details must be removed, and some laws (for example California's) give people rights over their data.
- CheckIs any of it regulated?
Health records, financial-account data and professional client files carry their own rules. Exclude them unless counsel says otherwise.
Which dealership records are most likely to interest buyers?
The service department is often the richest source. A repair order follows a clear chain: the customer's complaint, the technician's diagnosis, the recommended work, what the customer approved or declined, the parts ordered, and the result. Exceptions, such as comebacks or warranty rejections, add the kind of decision-making buyers generally look for.
- Repair orders linking complaint, diagnosis, recommendation and outcome
- Comebacks (repeat repairs) and how each was resolved
- Warranty claims submitted to the manufacturer, including rejections and resubmissions
- Parts backorders and substitutions, and how jobs were rescheduled
- Used-vehicle appraisal and reconditioning decisions, with costs and outcomes
- Customer complaints and how managers settled them
- Your own process guides, policies and training material
Why does customer financing data stay out?
The Safeguards Rule. The FTC's (Federal Trade Commission's) Safeguards Rule applies to dealers that arrange financing or lease vehicles for more than 90 days, which the FTC says includes most dealers. It protects customer information, meaning nonpublic personal information about people the dealer financed or leased to, such as approved credit applications and lists of customers who financed or leased. The FTC's dealer guidance says that protection continues for as long as the dealer holds the information, even after the customer relationship ends, and dealers must oversee any outside company that gets access to it.
The Privacy Rule. Under the FTC's Privacy Rule for auto dealers, even the fact that someone financed or leased a car is covered information, and sharing it with an unrelated third party generally requires a privacy notice and a chance to opt out, subject to limited exceptions. An AI company licensing your records would be an unrelated third party.
The simplest approach is to leave everything from the F&I office out: credit applications, deal jackets, lender communications, lists of financed customers, and anything that reveals how a car was paid for. Talk to your lawyer.
What other rights issues come up?
Service records are not automatically safe. The FTC's dealer guidance lists service and maintenance records among the records that are generally not customer information under the Safeguards Rule, though combining them with financing customer information changes that. They still carry names, phone numbers and vehicle identification numbers (VINs) that can be traced to an owner, so they remain personal data under state privacy laws. See the employee and customer privacy guide.
Manufacturer and DMS agreements. Your franchise agreement with the manufacturer, its warranty program rules, and your DMS contract may each say something about how data can be used or extracted. Data you received from a manufacturer, such as recall lists, may only be usable for the purpose it was given. Check each agreement before including records that came through those channels.
What should a dealership leave out?
Typical exclusions for a dealership:
- All financing and leasing records, credit applications and deal jackets
- Any list or field showing which customers financed or leased
- Customer names, addresses, phone numbers, emails and driver's license details
- VINs, license plates and vehicle location or telematics data
- Manufacturer-supplied data restricted by your franchise or program agreements
- Employee pay plans, commissions and HR records
How should a dealership get started?
Begin with the service department and your own internal policies, since repair orders can be cleaned of customer and vehicle identifiers and do not depend on financing data. Ask your DMS provider what export options exist and whether your contract limits them. Keep F&I and sales deal records out of scope from the start, and confirm your plan with whoever runs your Safeguards Rule information security program.
Common questions
Can a dealership license financing data?
No. It is protected customer information under FTC rules that apply to most dealers, and sharing it with an unrelated company raises privacy notice and opt-out issues. Leave it out.
Are service repair orders usable?
Often, once names, contact details and VINs are removed. The FTC's guidance treats service records as generally outside the Safeguards Rule's customer information, but not when they are combined with financing information.
Does my DMS contract matter?
It may. Some DMS and manufacturer agreements address how data can be extracted or used, so review them before exporting.
What about closed or sold stores?
The FTC says protection of financing customer information continues as long as you hold it. The same exclusions apply. See the closing-a-company page.
Sources
- Dealer Management System (DMS) Software - CDK Global, accessed 2026-10-16
- Automobile Dealers and the FTC's Safeguards Rule: Frequently Asked Questions - Federal Trade Commission, accessed 2026-10-16
- The FTC's Privacy Rule and Auto Dealers: Frequently Asked Questions - Federal Trade Commission, accessed 2026-10-16
General information, not legal, tax or financial advice.