# 07. Licenses: estimating, parts and scan data. The exact path for each

> **Superseded in part, 18 Oct 2026.** A red-team pass checked this note against primary sources and found claims that are wrong or incomplete. Do not use a claim from this note before you check it in the claims check table of: [09-redteam-cieca-secureshare.md](view.html?f=notes/09-redteam-cieca-secureshare.md), [09-redteam-estimating-parts.md](view.html?f=notes/09-redteam-estimating-parts.md), [09-redteam-oem-scan.md](view.html?f=notes/09-redteam-oem-scan.md).

Research date: 18 Oct 2026. All "read" dates below are 18 Oct 2026 unless a row says otherwise.
Method: public pages, public PDFs, public JSON that a page loads, trade press. No log-ins. No forms sent. No sign-ups.
Builds on 03-parts-networks.md and 06-oem-ems-licenses.md. This file does not repeat their findings. It adds steps, agreements, form fields and restrictions.

Labels:
- **VERIFIED**: I read it on the cited page on the cited date.
- **VENDOR CLAIM**: the vendor says it about itself.
- **3RD PARTY**: a non-vendor source says it.
- **UNVERIFIED**: no source confirms it. Do not use it as a fact.

Note on insurance, SOC 2, EIN and entity type: no public page for any of the 7 programs asks for E&O insurance, cyber insurance, a SOC 2 report, a pen test or an EIN. "Not stated" in a row means I looked and the source is silent. It does not mean "not required". Expect these in the private agreement or in a security questionnaire. That expectation is UNVERIFIED.

---

## 0. The 5 findings that change the plan

1. **CIECA Tier 1 is confirmed at $1,000 per year, with no setup fee, and it auto-renews.** You can buy it online by credit card and get the standards at once. The checkout asks for no EIN and no entity type.
2. **CCC Secure Share is free, but its Permitted Use Terms conflict with core Revv features.** The terms forbid using the data "to present to any third party the Data in repair estimate form". They also forbid building "a collision estimating database, parts catalog or price list". A supplement sent to an insurer can be "estimate form". Get a lawyer to read this before Revv applies.
3. **CCC accepts only production apps that are "commercially available in the United States".** "Demos, betas, and trial versions do not belong in the Marketplace." Revv must ship first, with another data path, and then apply.
4. **No CCC App Category fits "AI estimate review and supplement" today.** The nearest fits are "OEM Procedures" and "Detailed Reporting". You can ask CCC for a new category at secureshare@cccis.com.
5. **Mitchell, Solera, OEC, PartsTrader, asTech and Opus IVS have no open program that fits Revv.** Mitchell's public developer portal is for RepairCenter, not Cloud Estimating, and it looks dormant. The practical Mitchell and Audatex path is the shop's own EMS or BMS export.

---

## 1. CIECA membership (the license for EMS, BMS and CAPIS)

| Field | Finding | Source (read 18 Oct 2026 unless noted) | Confidence |
|---|---|---|---|
| Grantor | Collision Industry Electronic Commerce Association (CIECA), a non-profit. 500 Westover Dr. #11617, Sanford, NC 27330 | https://www.cieca.com/Membership/pricing | High |
| Cost | Technology Corporate Tier 1, revenue "$1M or Less": **$1,000.00 per year**. `setup_fee: 0.0`. `billing_cycles: -1`, so it bills every year until cancelled. Tier 2, $1M to $10M: $2,000. Full table is in 06, section 4.4 | CIECA's public plan feed, loaded by the pricing widget: `https://subscriptions.zoho.com/api/v3/widgets/products?product_digest=2-5db3b16e…` (product "Technology Corporate", plan code T1). Checkout page shows "Tier 1 - $1M or Less … $1,000.00 Billed Yearly": https://account.cieca.com/subscribe/0e3e04f7ea0322df8132c1ce73ed4fac835d327f877b7e75ad482bf477cf719e/T1 | High |
| Which tier | Technology Corporate is "For companies that develop and sell commercially available software products and services." CIECA uses revenue as a proxy for transaction volume | https://www.cieca.com/Membership/pricing · https://www.cieca.com/Membership/corporate-technology-membership | High |
| Entity | Not stated. The pages say "companies". The terms define a licensee as "a person or entity". The checkout asks for "Company*" and "Website*". The phone field offers every country code, so a non-US company may be able to join. That last point is an inference | https://www.cieca.com/Membership/terms-conditions · checkout URL above | Medium |
| Tax ID (EIN) | Not asked on the checkout form | Checkout URL above, rendered read-only | High (for the form) |
| Insurance | Not stated | — | — |
| Security audit | Not stated | — | — |
| NDA | Built into the license terms. "Member shall not disclose CIECA IP to a third party without the prior written consent of CIECA." Contractors may see it only under a written agreement and a "need to know" | https://www.cieca.com/Membership/terms-conditions | High |
| Application form | Online checkout (Zoho Subscriptions, "Subscribe" button). Fields: First Name, Last Name, Email, Company, Mobile, Phone, Website, Industry, logo permission, announcement permission, billing Street, City, Zip, card. Footer: "By clicking 'Subscribe' you agree to the License Terms & Conditions and Privacy Policy." Option 2: ask operations@cieca.com for an invoice | Checkout URL above · https://www.cieca.com/Membership/membership | High |
| Steps | 1. Open the pricing page and pick Technology Corporate, Tier 1. 2. Fill the checkout form and pay by card. Or email operations@cieca.com for an invoice. 3. Accept the License Terms by the act of subscribing. 4. Sign in at cieca.com and download the standards from "Standards Releases". 5. Add staff with "Add New User". 6. Optional: join a committee and the CIECA Slack | https://www.cieca.com/Membership/membership · https://www.cieca.com/ | High |
| Review | None described. "Pay now by credit card: Join right away and access the Standards immediately." | https://www.cieca.com/Membership/membership | High |
| Time | Same day by card. Invoice route time is not stated | Same | High |
| Data you get | No data. You get the license and the documents: "Full access to the CIECA standards, implementation guides and standard codes", schemas, code lists. Plus "The right to incorporate CIECA standards into software that your company develops and provides to third parties" | https://www.cieca.com/Membership/corporate-technology-membership | High |
| BMS certification | **None found.** No CIECA page describes a BMS or CAPIS certification program. The Services page names only "test instances". A search found no certified-vendor list | https://www.cieca.com/Services-simplified · web search 18 Oct 2026 | Medium |
| Key restrictions | Non-transferable. Use only while "a CIECA member in good standing". If membership lapses, the "exit payment" to keep using the licenses is "five times (5X) the most recent CIECA annual fees". On termination: "immediately cease any and all further use of CIECA IP". A contractor "cannot use CIECA standards to build software or APIs for non-member companies" | https://www.cieca.com/Membership/terms-conditions · https://www.cieca.com/Membership/who-needs-a-cieca-license | High |
| Startup discount | None. The "CIECA for Startups" page gives a tutorial and a video only | https://www.cieca.com/Membership/cieca-for-startups | High |
| Contact | operations@cieca.com · 425-366-8237 | https://www.cieca.com/ | High |

**Effect for Revv:** buy this first. CCC Secure Share requires it. Solera's integration guide tells clients to get it. It also covers Revv's use of EMS fields from a shop export.

---

## 2. CCC Secure Share (estimate data from CCC ONE shops)

| Field | Finding | Source | Confidence |
|---|---|---|---|
| Grantor | CCC Intelligent Solutions Inc., 222 Merchandise Mart Plaza, Suite 900, Chicago, IL 60654 | https://www.cccsecureshare.com/Terms | High |
| Cost | **$0.** FAQ: "Will third party app developers be charged a fee? No." Fee history: in Jan 2017 RDN reported "a per-workfile fee of $0.50 starting in April 2018" and "potentially a one-time fee of $2,500". On 19 Dec 2017 CCC dropped both: "We are not going to charge for Secure Share, and we're not going to change that position." **Resolved: the current fee is $0, and the 2017 fees never started** | https://www.ct.cccsecureshare.com/Faq (© 2026) · https://www.repairerdrivennews.com/2017/01/20/ccc-says-secure-share-still-on-track-for-april-bms-switch-drawing-interest-from-familiar-new-companies/ · https://www.repairerdrivennews.com/2017/12/19/ccc-secure-share-will-be-free-ems-support-to-remain-indefinitely/ | High |
| Entity | A company that can bind itself. The person who accepts must have "full legal authority to bind your employer or such entity". The website is "for use only by persons located in the United States". The app "must also be commercially available in the United States". Entity type and state of formation are not stated | https://www.cccsecureshare.com/Terms (last modified 29 Sep 2016) · https://www.cccsecureshare.com/legal/appcategoryguidelines | High |
| Tax ID (EIN) | Not stated. The registration form has no tax ID field | Register form template inside https://www.cccsecureshare.com/bundles/register (public JS) | High (for the form) |
| Insurance | Not stated in any public document | — | — |
| Security | Guidelines: safeguards "no less rigorous than accepted industry practices". "All API secret keys and credentials should be encrypted." "Personnel with access to PII data should undergo criminal background checks." "Data at rest or in motion over the wire should be encrypted." Apps "shall be hosted on servers that physically reside in the United States". Data "shall exclusively be stored in and accessible from the United States". CCC "reserves the right to request an audit". No SOC 2 or pen test is named | https://www.cccsecureshare.com/legal/appstandardsandreviewguidelines (updated 18 Dec 2017) · https://www.cccsecureshare.com/legal/permitteduses (modified 17 Mar 2017) | High |
| NDA / agreements | 3 documents: (a) **Developer Registration Agreement**, accepted in the sign-up wizard; (b) **Application Registration Agreement**, which includes (c) the **Permitted Use Terms**. The terms of use say: you may use the APIs to build after (a), but you may not "register or market the application as having access to Secure Share unless you have entered into an Application Registration Agreement". The text of (a) and (b) is not public. CCC sends (a) only after you start the form | https://www.cccsecureshare.com/Terms · register JS above | High that they exist. Text UNVERIFIED |
| Application form | Wizard with 3 steps: "Company Basics", "Login Details", "Registration Agreement". Fields: Company name (under 50 characters), First name, Last name, Email, a required box "Yes, I am a CIECA member" ("You must be a CIECA member to register."), a box "I agree to the Developer Registration Agreement". Log-in uses a Google account. Later you choose "a company display name, and a few other questions" | https://www.cccsecureshare.com/Register (form text from the public register JS) | High |
| Steps | 1. Join CIECA (section 1). 2. Register at cccsecureshare.com/Register with a Google account and accept the Developer Registration Agreement. 3. Wait for CCC review: "Registration applications will be reviewed by CCC". 4. When approved, use the developer dashboard with "technical documentation, APIs, and samples". 5. Build against the API. 6. Submit the app: pick an App Category, write metadata, a logo up to 500x300, support URL, phone and email, and a "Note to Reviewer". Backend must be live during review. 7. Sign the Application Registration Agreement and Permitted Use Terms. 8. CCC reviews the app and checks the category. "the appropriate BMS message will be assigned for each registered app based on business purpose". 9. App goes live in the CCC Secure Share Marketplace. 10. Each shop turns the app on in CCC ONE under Configure > Secure Share. The developer "may accept or reject the request from the collision repairer". 11. Ongoing: CCC health checks. Each change needs review | https://www.cccsecureshare.com/Developers · https://www.ct.cccsecureshare.com/Faq · https://www.cccsecureshare.com/legal/appstandardsandreviewguidelines · https://www.cccsecureshare.com/Repairers · search snippet of https://www.cccsecureshare.com/Insurance | High |
| Testing / certification | No formal certification. The checklist: "Test your App for crashes and bugs", "Enable backend services so that they are live and accessible during review". Uptime rule: removal after 48 hours unreachable, or 48 hours down between 6AM and 8PM Central in 7 days. Limit: "10,000 transactions per hour" | appstandardsandreviewguidelines (above) | High |
| Time | Guidelines: "We will examine your submission as soon as we can." RDN, Dec 2017: one vendor "registered on a Friday and was integrated and live on Secure Share by the following Friday." No 2024 to 2026 data point found | Same · RDN 19 Dec 2017 | Medium |
| Data you get | Only the data elements of the assigned App Category. Example: "Parts Ordering" apps do not get owner contact data. "CSI" apps do. Transaction types: Estimate, Final Bill, Part Price Changes, "in a CIECA BMS-equivalent data format". Transport: "RESTful cloud service API, JSON/XML". The full field list per category is only at cccsecureshare.com/docs, after log-in. The Limited Parts message shows only the first 11 VIN digits (see 06, section 4.6) | https://www.cccsecureshare.com/legal/appcategoryguidelines · FAQ · Developers page | High |
| App Categories | CSI, Repair Status, Body Shop Management, OEM Certification Reporting, Paint/Material Calculators, Paint Mixer, Shop Equipment, Vehicle Diagnostics, Vehicle Diagnostics Reporting, Parts Procurement, Summary Reporting, Rental Management, Workflow/Audit, OEM Procedures, QC Checklist, Detailed Reporting. **None names AI estimate review or supplements.** "Workflow/Audit" is for review "by an insurer or third party administrator". New category requests go to secureshare@cccis.com | appcategoryguidelines (above) | High |
| Key restrictions (Permitted Use Terms) | Data use only for the registered App Type. Banned: "comparison of CCC sourced data … including … estimate costing, labor times, and parts pricing Data therein, to those of CCC's competitors"; "reverse engineer or otherwise attempt to construct … a collision estimating database, parts catalog or price list"; "transformation of the Data into CIECA EMS format"; "to present to any third party the Data in repair estimate form"; "publishing for public consumption"; "pricing insurance policies". Secure Share plus EMS must be "your sole source of the Data from CCC". Delete customer data "within 90 days" after termination. Guidelines also ban: apps "under an insurance company, or that exclusively targets insurance companies"; use or storage outside the US; "Demos, betas, and trial versions". "Apps may be removed from the Marketplace without notice" | https://www.cccsecureshare.com/legal/permitteduses · appstandardsandreviewguidelines | High |
| Governing law | Website terms: Illinois law. Binding arbitration in Chicago. Class action waiver. Claims within 1 year | https://www.cccsecureshare.com/Terms | High |
| Contact | secureshare@cccis.com (decoded from the page). Contact form fields: first name, last name, company, email, phone, message | https://www.cccsecureshare.com/Terms · register JS | High |

**Effect for Revv:**
- The cost is $0 plus CIECA dues. The risk is legal and strategic, not money.
- Revv's supplement output may count as presenting CCC data "in repair estimate form" to a third party. A lawyer must read the Permitted Use Terms and the Application Registration Agreement first.
- Revv must already sell a production product in the US before CCC will list it.
- Ask CCC in writing which App Category fits Revv. Do this before you build to the API.

---

## 3. Mitchell / Enlyte (Mitchell Cloud Estimating, RepairCenter)

| Field | Finding | Source | Confidence |
|---|---|---|---|
| Grantor | Mitchell International, Inc., an Enlyte company | https://developer.mitchell.com/terms-use | High |
| Programs found | (a) **RepairCenter Partner Network** at developer.mitchell.com. It is for RepairCenter, Mitchell's shop management workspace. It is not for Mitchell Cloud Estimating. (b) **No public partner or API program for Mitchell Cloud Estimating** was found. No "Mitchell Connect" or "Enlyte partner" developer program was found. mitchell.com/partners and enlyte.com/partners return 404 | https://developer.mitchell.com/Welcome · https://developer.mitchell.com/apis · web search 18 Oct 2026 | High (for what is public) |
| Is (a) alive? | Signs that it is dormant: API "version 2.2" news page; required notice "RepairCenter © 2010"; the forum shows 0 topics and 0 posts; /user/register returned HTTP 403 to my GET | https://developer.mitchell.com/apis/whats-new-22 · https://developer.mitchell.com/forum · terms-use | Medium |
| Cost | SDK license is "royalty free". Business terms sit in a separate **Reseller Agreement** with "monetary terms". The sample Reseller Agreement link returns 404. Support "some of which require the payment of fees" | https://developer.mitchell.com/apis/development-life-cycle · terms-use §1, §6 | High that fees can apply. Amount UNVERIFIED |
| Entity | "the entity on behalf of which you agree". California law governs. The SDK "is not licensed" to CCC, Solera/Audatex, Summit Software Solutions or Rome Technologies, or their affiliates | terms-use preamble, §9, §16.5 | High |
| Tax ID / insurance / SOC 2 | Not stated | — | — |
| NDA | Built in. "the SDK, all data obtained via the Interface, and all materials provided hereunder by Mitchell are confidential and proprietary information of Mitchell". Obligation lasts the term or 3 years after termination, whichever is longer. You must sign the agreement "and return to Mitchell" | terms-use §12, preamble | High |
| Steps (RepairCenter) | 1. Register as a partner and accept the SDK license. You get a sandbox (UAT build of RepairCenter, up to 10 concurrent users). 2. Register each app to get an App ID and App Key. 3. Build to the OData REST API. 4. Email developer.support@mitchell.com, subject "<App Name> _Review_ mm/dd/yy", with the Approval Form and "Any portion of your code that utilizes our API". 5. After approval, get production keys and a production test shop. Give Mitchell "3 test accounts". 6. Run a pilot with mutual customers through your Mitchell rep. 7. Sign the Reseller Agreement. It "must be completed prior to Marketing your app". 8. Send the marketing form. 9. Launch in the RepairCenter ToolStore. Shops buy the add-on there. 10. Re-submit for approval before each production update | https://developer.mitchell.com/apis/development-life-cycle · https://developer.mitchell.com/apis/repaircenter-sandbox | High (as published. Current use UNVERIFIED) |
| Time | "The approval process may take a couple of weeks depending on the amount of information to review." Total time not stated | development-life-cycle | Medium |
| Data you get (RepairCenter) | Per shop that licenses your App ID: RepairOrder (claim, customer, job, parts, invoice with actual labor cost), Opportunity, Shop data. "The data elements retrieved are securely restricted by Line of Business" | https://developer.mitchell.com/apis/whats-new-22 | Medium |
| Cloud Estimating data path | The shop's own export. Mitchell, 2021: "we give out [sic] users the choice of EMS or BMS and allow them to have their own copy of the data." "We don't have the equivalent of Secure Share at this time." 2017: free BMS export "without new licensing terms and transaction fees", and "Freedom to share data without restrictions with your choice of business partners." No 2024 to 2026 change found | https://www.repairerdrivennews.com/2021/05/17/estimating-systems-discuss-body-shops-options-for-managing-bms-communication/ · https://www.repairerdrivennews.com/2017/11/01/mitchell-audatex-pledge-to-offer-shops-free-bms-exports/ | Medium (statements are 5 to 9 years old) |
| Recent third-party integrations | Mitchell Diagnostics Sync, Oct 2025: "automatically adds ADAS operations from third-party providers to Mitchell Cloud Estimating". First partner Opus IVS. Mitchell "plans to integrate with other third-party diagnostic providers". How a provider joins is not stated | https://www.repairerdrivennews.com/2025/10/31/mitchells-new-diagnostic-sync-automatically-adds-adas-operations/ | High |
| Key restrictions | Either party "may terminate this Agreement at any time with or without cause". Mitchell may develop similar functionality. Feedback becomes Mitchell's. Remove app for "undue technical stress". No marketing claims without Mitchell approval | terms-use §10, §13.2, §3 · development-life-cycle | High |
| Contact | developer.support@mitchell.com | https://developer.mitchell.com/apis | High |

**Effect for Revv:** do not build on the RepairCenter API. For Mitchell Cloud Estimating shops, read the shop's EMS or BMS export with the shop's consent. Email developer.support@mitchell.com to ask if a Cloud Estimating partner path exists. Treat any answer as business development, not a program.

---

## 4. Solera / Audatex / Qapter (US)

| Field | Finding | Source | Confidence |
|---|---|---|---|
| Grantor | Solera (Audatex North America) | https://na.api.solera.com/files/Estimate%20Return%20API.pdf | High |
| Program | **No public partner program and no self-serve portal.** The integrations portal na.api.solera.com shows only an Audatex "User ID / Password" sign-in. 3RD PARTY: "there is no self-serve developer portal on solera.com, no signup, and no public API key" and "onboarding is a provisioned B2B integration run through a Solera account representative" | https://na.api.solera.com/ · https://providers.apievangelist.com/providers/solera/ (last updated 6 Oct 2026) | High (portal). Medium (3RD PARTY) |
| Public spec | "Estimate Document Return API Integration Guide", v1.4, 2 Jun 2020. "Assignments will be sent in CIECA BMS compliant format using webservices (Application/JSON API)." Estimate Return message is "Version 5.7.0". Token URLs: api-demo.audatex.com/connect/token and api-prod.audatex.com/connect/token. Auth: "Basic Auth and OAuth 2". Options: IP allow-list, VPN, "SSL over Internet" | Estimate Return API PDF (above), read 18 Oct 2026 | High |
| Cost | Not stated | — | — |
| Entity / tax ID / insurance | Not stated | — | — |
| CIECA | Guide: "Clients using CIECA standards such as the BMS standard file format should consult CIECA about whether membership is required". The schema is a CIECA member download | Estimate Return API PDF §4 | High |
| Security | "The Client must have a segregated development and test environment". No SOC 2 or pen test named | PDF §5 | High |
| NDA | Not stated | — | UNVERIFIED |
| Steps | Guide's 7 steps: 1. Meet prerequisites, with an Audatex account rep and a kickoff meeting. 2. Review technical specs and the data mapping. 3. Build your services. 4. Set up a secure connection. 5. System integration testing. 6. UAT on test cases from a "Project Charter", scheduled with Audatex. 7. Go live | PDF §3, §5, §9, §10 | High |
| Time | Not stated | — | — |
| Data you get | Completed estimate documents (Estimate Return), images, documents. "The Audatex system does not support all fields available in the CIECA BMS." 3RD PARTY lists 10 to 11 APIs, among them Assignment, Estimate Return, Get Document, Get Image, Valuation | PDF §6.1 · API Evangelist | Medium |
| Who it serves | The UAT text names "the insurance carrier or integration partner". Solera, 2021: "Solera/Audatex offers a BMS Enterprise level integration via our B2B Integration Services" and "we have the capability to extend the implementation to repairers and vendors." Solera also said Audatex "would not support downloading the BMS file locally" | PDF §10 · RDN 17 May 2021 (link in section 3) | Medium |
| Key restrictions | Not public | — | — |
| Contact | No partner contact published. Support: AXUS.AASupportContact@audatex.com, (866) 420-2048. Route for a new integration: a Solera account representative | PDF §12, §13 | Medium |
| Startup example | Partly says it has an Audatex integration where "job details and parts lists flow automatically from Audatex into Repair". Region and method are not stated. The page now returns 404 | Search snippet of https://www.partly.com/integrations/audatex (404 on 18 Oct 2026) | Low |

**Effect for Revv:** low priority. Audatex has a small US shop share and a carrier-first integration model. Ask a Solera rep only when a paying Qapter shop asks for it. Until then, use the shop's export or PDF upload.

---

## 5. OEC: CollisionLink, RepairLogic, PartsTech API

### 5a. CollisionLink and RepairLogic

| Field | Finding | Source | Confidence |
|---|---|---|---|
| Grantor | OEC (OEConnection). Majority owner: Francisco Partners (deal agreed Nov 2025, see 03) | https://oeconnection.com/products/collisionlink/ | High |
| Program | **None public.** The product pages name "DMS integration" for dealers only. oeconnection.com/partners and /integrations return 404. Past CollisionLink links were one-off deals: Norgate ABW Tracker, Web-Est (about 2014 to 2015), PartsTrader (2015). RepairLogic has a closed deal with CCC ONE | CollisionLink and RepairLogic pages · https://www.fenderbender.com/home/article/11516793/oeconnection-partstrader-integrate-july-23-2015 | High |
| Cost / entity / insurance / security / NDA / steps / time | Not stated. No public path | — | — |
| Data | CollisionLink: OEM part numbers by VIN, dealer prices, OEM programs. RepairLogic: repair plan, single-use parts report, calibrations report | See 03, section 3.3 | High |
| Conflict | OEC sells **EstimateIQ**: "Analyze estimates in real time to identify missed operations and maximize your repair revenue." This is the same job as Revv | https://oeconnection.com/products/collisionlink/ (site menu) | High |
| Contact | General form only at https://oeconnection.com/contact-us/. No email published | Same | Medium |

### 5b. PartsTech API

| Field | Finding | Source | Confidence |
|---|---|---|---|
| Grantor | PartsTech, Inc., a Delaware corporation, "an OEC Company" | https://partstech.com/api-agreement-terms/ (© 2026) | High |
| Cost | "The fees for the PartsTech API and the PartsTech Services are listed on the Order Form". Amount not public. If you break exclusivity: "You will be charged an annual fee for integration" | Same, Fees and Responsibilities sections | High that fees exist. Amount UNVERIFIED |
| Entity | You warrant that you are "duly organized, validly existing and in good standing" where registered. Sanctions-list warranty. A signer with authority | Same, Representations | High |
| Tax ID / insurance / SOC 2 | Not stated | — | — |
| Security | A written "Security Program" with "administrative, technical and physical safeguards". A privacy policy "no less protective" than PartsTech's | Same, Responsibilities | High |
| NDA | Mutual Nondisclosure clause in the terms. "the existence and terms of this Agreement" are confidential | Same, Nondisclosure | High |
| Application form | **Order Form**, "signed by Developer and PartsTech". No public application page found. /api, /developers, /integrations return 404 | Same · probes 18 Oct 2026 | High |
| Steps | 1. Contact PartsTech (info@partstech.com). 2. Agree scope and fees. 3. Sign the Order Form, which pulls in the published terms. 4. Get API Keys ("Developer ID, certificate ID, and application ID") and a "Test User". 5. Build. 6. Give PartsTech setup instructions, ordering instructions and support contacts "prior to launching the integration". 7. Agree joint marketing. 8. Each shop links its own PartsTech account in your app | Terms (definitions, Responsibilities, Marketing sections) · https://partstech.com/contact/ | Medium. Steps 1 and 2 are inferred |
| Test environment | The terms define a "Test User" account. This conflicts with Supergood's "no sandbox" claim in 03 | Terms, Definitions | High |
| Time | Not stated | — | — |
| Data you get | Catalog Webservice, Punchout Webservice, Labor Operations Webservice ("flat-rate labor guides and associated estimated work times"), Tires Webservice. Live price and stock from the shop's suppliers | Terms, Definitions | High |
| Key restrictions | **Exclusivity:** PartsTech must be "the sole parts catalog and procurement solution offered for aftermarket parts sourcing" in your app. No caching or storage "except as required for Your accounting purposes on an order-by-order basis". No "competitive product, service, platform or database of auto parts, vehicles, pricing information". No "metrics about, or … statistical analysis of" the offerings. Offer it "at no additional charge". **Data grant to PartsTech:** a perpetual, irrevocable license to "all or any portion of the data compiled in connection with Your or Your Users' use", except PII. Suspension "for any or no reason and at any time". Term auto-renews yearly. 30 days notice to exit. Massachusetts law, Suffolk County courts | Terms, Licenses, Responsibilities, Restrictions, Term, Suspension, Governing Law | High |
| Contact | info@partstech.com | https://partstech.com/contact/ | High |

**Effect for Revv:** PartsTech is a mechanical and tire marketplace. Its exclusivity clause and data grant are heavy for a collision AI product. Skip for v1.

---

## 6. PartsTrader / Orderly

| Field | Finding | Source | Confidence |
|---|---|---|---|
| Grantor | PartsTrader, LLC. Owner: Enlyte, closed 6 Apr 2026 | https://www.partstrader.com/terms-of-service/ · https://www.partstrader.com/news_updates/enlyte-completes-acquisition-of-partstrader/ | High |
| 2015 program | Technology Partner Program, 1 Jun 2015: "The Shop Management System API" and "The Supplier Inventory System API". Protocols: "SOAP 1.2, OAuth 2.0 and the CIECA Parts & Materials Procurement BMS standard." Apply at form.partstrader.us.com/cn/acpij/technology-partner | https://fenderbender.com/news/article/55049356/partstrader-technology-partner-program-launched | High (for 2015) |
| Current status | **No public program found in 2026.** The 2015 form URL failed on 18 Oct 2026: HTTPS timed out, HTTP returned 500 "something went wrong". partstrader.com and myorderly.com have no partner, API or developer page. Site search of partstrader.com for "technology partner", "API" and "integration" found no partner page. Supplier "inventory integrations" still exist (customer quote on the home page) | Probes and https://www.partstrader.com/wp-json/wp/v2/search, 18 Oct 2026 | Medium |
| Cost / entity / tax ID / insurance | Not stated | — | — |
| Security | PartsTrader holds ISO/IEC 27001:2022. Ask for the certificate at security@partstrader.us.com. Partner security rules: not stated | https://www.partstrader.com/security/ | High |
| NDA | User terms have a Confidential Information clause | https://www.partstrader.com/terms-of-service/ (last reviewed 20 Nov 2024) | High |
| Steps / time | Not public. Route: business development through support@partstrader.com or 855-932-7278 | https://www.partstrader.com/ | Medium |
| Data | Quotes, orders, insurer parts rules. Orderly can "export details back to your estimate" | https://myorderly.com/faq | VENDOR CLAIM |
| Key restrictions | User terms: "Other than to PartsTrader, the Quote shall not be disclosed by either the Repairer or the Supplier to any third party." Bans "spiders, robots, scrapers, or data mining tools". PartsTrader may terminate "at any time, without explanation, for any reason". So a shop may not forward its PartsTrader quotes to Revv. That is my reading of the clause, not legal advice | https://www.partstrader.com/terms-of-service/ | High (text). Medium (reading) |
| Conflict | Orderly "analyzes estimates to detect inaccuracies in part selections, suggest missing components" and "minimizes costly supplements". Enlyte also owns Mitchell | https://myorderly.com/platform | High |
| Contact | support@partstrader.com · 855-932-7278 · security@partstrader.us.com | partstrader.com pages above | High |

**Effect for Revv:** no open door. Owner is Mitchell's parent, and Orderly overlaps Revv. Do not use PartsTrader quotes from shops without written PartsTrader consent.

---

## 7. Scan and ADAS partners: CCC Diagnostics, asTech (Repairify), Opus IVS

| Field | Finding | Source | Confidence |
|---|---|---|---|
| Grantors | CCC (Diagnostics Workflow), Repairify (asTech), Opus IVS | https://www.cccis.com/partners/astech · https://www.cccis.com/partners/opus | High |
| How partners reach CCC | Bilateral deals. CCC's partner pages have a "Partner With Us" form. Fields: first name, last name, email, company name, company website, job title, comments. No program terms are public. Secure Share also has "Vehicle Diagnostics" and "Vehicle Diagnostics Reporting" app categories. Whether asTech or Opus use Secure Share is UNVERIFIED | Partner pages above · form https://go.cccis.com/l/44852/2025-03-12/23jktcn · appcategoryguidelines | High (form). UNVERIFIED (mechanism) |
| CCC Diagnostics Network | Nov 2025 additions: Kinetic and Revv (revvhq.com, the ADAS company, not this Revv). "Activation of Revv and Kinetic is included at no additional cost to users." Join steps and fees not stated | https://www.repairerdrivennews.com/2025/11/03/ccc-integrates-oec-repairlogic-opus-ivs-expands-calibration-tools-in-diagnostic-workflow/ | High |
| asTech | Sends "OEM-quality scan data and invoices straight into CCC ONE® workfiles". Other one-off links: Nexsyis (2017), Mitchell, Autel (2024). **No public API or partner program.** api.astech.com returned 403. /partners and /integrations return 404 | https://www.cccis.com/partners/astech · probes 18 Oct 2026 · web search | High |
| Opus IVS | ADAS Map in CCC ONE (expanded 30 Oct 2025). Lines can be added to the estimate. Mitchell Diagnostics Sync partner (Oct 2025). Elitek (LKQ) licensing deal (Nov 2024). **No public API or partner program.** /partners, /integrations, /api return 404 | https://www.cccis.com/news-and-insights/posts/ccc-expands-relationship-with-opus-ivs-to-deliver-adas-insights-to-collision-repairers · RDN 31 Oct 2025 · probes | High |
| Cost / entity / insurance / security / NDA / time | Not stated for any of the 3 | — | — |
| Data | Scan reports (PDF), calibration recommendations, invoices. These go to the estimating system, not to third parties | Sources above | Medium |
| Contact | CCC: "Partner With Us" form above. Opus IVS: support@opusivs.com (support, not partnerships). Repairify: form only at https://repairify.com/contact/ | Probes 18 Oct 2026 | Medium |

**Effect for Revv:** scan reports reach Revv only one way today: the shop uploads the PDF. A data deal with asTech or Opus is business development. Name risk: CCC already lists a "Revv" (revvhq.com) in its Diagnostics Network. CCC reviewers and shops may confuse the two names.

---

## 8. Order of work for Revv

| # | Action | Cost | Time | Gate |
|---|---|---|---|---|
| 1 | Buy CIECA Technology Corporate Tier 1 | $1,000 per year, auto-renew | Same day | None |
| 2 | Ship v1 on shop upload: EMS folder, BMS file, PDF estimate, scan PDF | $0 | Now | Shop consent. CIECA license covers EMS field use |
| 3 | Lawyer reads CCC Permitted Use Terms against the Revv supplement feature | Legal fee | 1 to 2 weeks (estimate) | Clause "repair estimate form" |
| 4 | Email secureshare@cccis.com: ask which App Category fits, or request a new one | $0 | Unknown | CCC answer |
| 5 | Register at cccsecureshare.com after v1 is live and sold | $0 | 1 week in 2017. Now unknown | Production app, US hosting, background checks |
| 6 | Email developer.support@mitchell.com about a Cloud Estimating path | $0 | Unknown | Likely none |
| 7 | Solera, OEC, PartsTrader, asTech, Opus | — | — | Business development only, after traction |

---

## 9. UNVERIFIED items

- Text of the CCC Developer Registration Agreement and Application Registration Agreement. CCC shows it only after the form starts.
- Whether CCC would treat a Revv supplement as data "in repair estimate form". Needs a lawyer and a CCC answer.
- Which CCC App Category, if any, CCC would give Revv.
- Current CCC review time. The only data point is 1 week, from Dec 2017.
- Any CCC, Mitchell, Solera, PartsTech or PartsTrader need for E&O insurance, cyber insurance, SOC 2, a pen test or an EIN. No public page asks for them.
- Whether a non-US company can join CIECA. The checkout lists all country codes, but no page says so.
- Whether CIECA has any BMS or CAPIS certification program. None found.
- Mitchell Reseller Agreement fees. The sample link is dead.
- Whether the Mitchell RepairCenter Partner Network still accepts new partners. Register page returned 403. Forum has 0 posts.
- Whether Mitchell offers any Cloud Estimating API to third parties in 2026.
- Solera partner fees, NDA, time, and whether Solera onboards shop-side vendors in the US.
- Region and method of the Partly and Audatex integration.
- PartsTech Order Form price.
- Whether the PartsTrader Technology Partner Program still exists in any form.
- How asTech and Opus IVS connect to CCC ONE: Secure Share or a private API.
- How a diagnostic provider joins Mitchell Diagnostics Sync or the CCC Diagnostics Network.