# 09. Red team: CIECA membership and CCC Secure Share

Research date: 18 Oct 2026. Every "Read" date in this file is 18 Oct 2026.
Scope: CIECA membership and license. CCC Secure Share. The CCC ONE shop-side EMS export. Trade press on CCC data access.
Method: public pages, the public plan feed that a page loads, public JavaScript, public PDFs, trade press. No forms sent. No sign-ups. No log-ins. I did not call any CCC "internalapi" endpoint.
Inputs checked: 07-licenses-estimating-parts.md, sections 1, 2, 8 and 9. 06-oem-ems-licenses.md, sections 1, 4 and 5.

Labels:
- **CONFIRMED**: a primary source says it, in the words quoted.
- **CONTRADICTED**: a primary source says something different. The evidence is in the row.
- **PARTLY CONTRADICTED**: the core is true, but a detail is wrong or missing.
- **UNVERIFIED**: no public source confirms it.

Compliance note: the cccsecureshare.com Terms of Use say "You agree not to ... Use any robot, spider or other automatic device, process or means to access the Website for any purpose". I read about 30 public pages with a script for this report. Revv staff must not script against cccsecureshare.com in future.

---

## 0. The 8 findings that change the plan

1. **The v1 "shop uploads the EMS file" path has a CCC ONE contract risk that 06 and 07 missed.** CCC ONE terms, as quoted at CIC in 2017, let a shop give EMS data to a third party only "as expressly permitted in writing in advance" by the DRP insurer or by the vehicle owner. The shop must keep the written permissions. CCC can audit for 12 months after the contract ends. The shop must indemnify CCC. The current text is not public.
2. **The 2018 CCC Repair Facility License Agreement forbids the shop to "compile estimate data for the purpose of creating a database".** This is quoted in a class action filed 8 Oct 2026. A Revv product that pools estimates from many shops must not make the shop breach this clause.
3. **Secure Share has no write-back for Revv.** Only "Vehicle Diagnostics Reporting", "Parts Procurement" and "Body Shop Management" apps can return data, and only part price changes. Revv cannot push supplement lines into CCC ONE through Secure Share.
4. **Secure Share bans "comparison of CCC sourced data ... including ... labor times, and parts pricing ... to those of CCC's competitors".** A supplement that compares CCC labor times to MOTOR, Mitchell or DEG guidance is at risk. The ban on "mine, harvest" and on building an estimating database "through compilation or otherwise" also puts AI training on Secure Share data at risk.
5. **"Detailed Reporting" is not a fit.** 07 named it as a near fit. The category requires "All data must be non-identifiable to the consumer and vehicle". A per-repair supplement tool cannot work on that data. "OEM Procedures" is the only near fit. ALLDATA Repair Planner, a line-by-line estimate review tool, is live on Secure Share. That is the best evidence that CCC approves estimate review apps.
6. **The CIECA license text does not say what the marketing page says.** The page promises "The right to incorporate CIECA standards into software that your company develops and provides to third parties". Section 2.1 of the license does not contain that grant. Get it in writing from CIECA.
7. **The CIECA license defines EMS as "Version 2.6 or later".** CCC ONE exports "EMS 2.01 Estimate". Ask CIECA if EMS 2.01 is in scope.
8. **CCC will change owner.** CCC signed an agreement on 15 Oct 2026 to be bought by a GTCR-led group with Elliott. Closing is expected in Q1 2027. The 2017 "free forever" promise was a statement by a CCC executive, not a contract term that I can see.

---

## (a) Claims check table

Source file key: 07 = 07-licenses-estimating-parts.md. 06 = 06-oem-ems-licenses.md.

| # | Prior claim | File | Verdict | Evidence, exact quote | Evidence URL |
|---|---|---|---|---|---|
| 1 | CIECA Technology Tier 1 is $1,000 per year, no setup fee, auto-renews | 07 §1 | CONFIRMED | Plan feed T1: "recurring_price": 1000.0, "setup_fee_formatted": "$0.00", "interval_unit": "years", "billing_cycles": -1. Checkout: "I agree to use the above card for automatic renewals and future transactions" | https://subscriptions.zoho.com/api/v3/widgets/products?product_digest=2-5db3b16e3c7b40a6b1e54c164cdbbecba41b323395217c342c8d054c4b8b8781f49a7274616cae4f58bcad6fd428a6fd0e3e04f7ea0322df318fde6c950d2d25 · https://account.cieca.com/subscribe/0e3e04f7ea0322df8132c1ce73ed4fac835d327f877b7e75ad482bf477cf719e/T1 |
| 2 | Tier 1 is "Under $1M" | 06 §4.4 | PARTLY CONTRADICTED | Pricing page says "Under $1M". Plan feed and checkout say "Tier 1 - $1M or Less" and "$1 Million or less in revenue". The two pages disagree at exactly $1M | https://www.cieca.com/Membership/pricing · plan feed above |
| 3 | Full tier table in 06 §4.4 | 06 §4.4 | CONFIRMED, 1 label differs | Tech T1 to T9: $1,000, $2,000, $3,000, $4,500, $6,000, $7,500, $12,000, $13,500, $15,000. Non-tech NT1 to NT10: $750, $1,500, $2,250, $3,750, $5,250, $6,750, $8,250, $9,750, $10,000, $15,000. Pricing page Tech Tier 9 is "$1B to $20B". Plan feed Tech T9 is "Tier 9 - $1B and greater" | pricing page · both plan feeds |
| 4 | You can buy by card and get the standards at once | 07 §1 | CONFIRMED as a CIECA statement. Day-1 content UNVERIFIED | "If you want to join now and access CIECA Standards immediately, you can do so by paying with a credit card." | https://www.cieca.com/Membership/membership |
| 5 | Checkout asks for no EIN and no entity type | 07 §0, §1 | CONFIRMED for page 1 | Form fields found: first_name, last_name, email, company_name, mobile_code, mobile, phone_code, phone, website, customer_cfs[1..3], billing_street, billing_city, billing_state_code, billing_zip, billing_country, is_recurring, is_consent_agreed. No tax or entity field. The card step did not render, so it is UNVERIFIED | checkout URL above |
| 6 | Checkout field list | 07 §1 | PARTLY CONTRADICTED | Mobile has no asterisk, so it is optional. Phone*, Website*, State*, Country/Region* are required. Logo question has 3 answers: "Approved", "Declined", "Contact Request". Announcement question has 3 answers: "Approved to share company name", "Please contact us before sharing", "Do not share company name". Industry list has 14 options, among them "Information Technology" and "Repair" | checkout URL above |
| 7 | Licensee is "a person or entity" | 07 §1 | CONFIRMED | "CIECA IP Licensee means a person or entity that has a license to use CIECA IP." CIECA itself is "an Ohio not-for-profit corporation" | https://www.cieca.com/Membership/terms-conditions |
| 8 | A non-US company may be able to join | 07 §1, §9 | UNVERIFIED | The checkout lists every country. Bylaws Company Class: "corporations, unincorporated associations, partnerships, and other organizations engaging in business or commerce for profit". No country rule found | checkout · https://www.cieca.com/files/CIECA%20By-Laws%20rev%202022-01-19.pdf |
| 9 | NDA is built in. Contractors need a written agreement and a need to know | 07 §1 | CONFIRMED | "Member shall not disclose CIECA IP to a third party without the prior written consent of CIECA." Contractors "shall agree in writing to be bound by the restrictions contained in this Agreement" and must "promptly return or delete" the material | terms-conditions |
| 10 | Exit payment is 5X the last annual fee | 07 §1 | CONFIRMED, with nuance | "making an exit payment to CIECA in the amount of five times (5X) the most recent CIECA annual fees paid by Member." It is an option to keep §2.1 rights for "Legacy Versions" after a lapse. §2.2 internal use of legacy documents survives a lapse with no payment | terms-conditions |
| 11 | On termination, stop all use of CIECA IP | 07 §1 | CONFIRMED, with nuance | "Upon termination of this Agreement, Member shall immediately cease any and all further use of CIECA IP." But: "This Agreement does not terminate upon the lapse of Member's CIECA membership". A lapse and a termination are different events | terms-conditions |
| 12 | A contractor cannot build for non-member companies | 07 §1 | CONFIRMED | "a contractor who is an Authorized User for a member company, cannot use CIECA Standards to build software / APIs for non-member companies." | https://www.cieca.com/Membership/who-needs-a-cieca-license |
| 13 | Tech membership gives the right to put CIECA standards in software sold to third parties | 06 §4.3, 07 §1 | CONFIRMED on marketing pages. Not in license text | Marketing page: "The right to incorporate CIECA standards into software that your company develops and provides to third parties." Plan feed: "Right to embed CIECA code in commercial products". License §2.1 grants only (a) exchange "with other CIECA IP Licensees", (b) documentation, (c) "to export or import estimates ... to or from third parties". §3: "Any use of CIECA IP other than the uses licensed under Section 2 above is prohibited." | https://www.cieca.com/Membership/corporate-technology-membership · terms-conditions |
| 14 | No CIECA BMS certification program | 07 §1 | CONFIRMED, none found | The Services page names only "documentation, schemas and test instances". Web search found no CIECA certification | https://www.cieca.com/Services-simplified |
| 15 | No startup discount | 07 §1 | CONFIRMED | The startup page has a tutorial and a video. It has no price | https://www.cieca.com/Membership/cieca-for-startups |
| 16 | Contact operations@cieca.com, 425-366-8237 | 07 §1 | CONFIRMED | Contact page: "Email: operations@cieca.com", "Phone: 425-366-8237". Executive Director: Paul Barry. Privacy contact: executivedirector@cieca.com | https://www.cieca.com/About/contact-us · https://www.cieca.com/About/cieca-staff |
| 17 | The CIECA license covers Revv's use of EMS fields from a shop export | 07 §1, §8 | PARTLY CONTRADICTED | §2.1(c) covers import of estimates from third parties. But "EMS means CIECA's dBase IV-based Estimate Management Standard Version 2.6 or later." CCC exports "EMS 2.01 Estimate". The CIECA license also does nothing about the shop's CCC ONE contract. See claim 37 | terms-conditions · https://help.cccis.com/learning/rf/prod-category/setupconfig/AddRemoveEMSPaths.pdf |
| 18 | EMS spec is members-only and part of membership | 06 §4.1 | CONFIRMED | /Messages/standards-release redirects to "/signin?uri=%2FMessages%2Fstandards-release". License defines CIECA Internal Standards Information to include "the Microsoft Word document that describes the EMS standard" | https://www.cieca.com/Messages/standards-release · terms-conditions |
| 19 | Secure Share needs active CIECA membership | 06 §5, 07 §1 | CONFIRMED | FAQ: "App developers will need to be an active CIECA member before registration will be processed." Guidelines: "Application registrants utilizing CCC Secure Share must maintain an active CIECA membership." Register form: "You must be a CIECA member to register." | https://www.cccsecureshare.com/Faq · https://www.cccsecureshare.com/legal/appstandardsandreviewguidelines · https://www.cccsecureshare.com/bundles/register?v=SpEZPxDKSLd5TK6HIEYyTkUGAcjVIPgk-a2duwIHnLQ1 |
| 20 | Secure Share fee is $0 and the 2017 fees never started | 07 §2 | CONFIRMED | FAQ: "Will third party app developers be charged a fee? No." RDN 19 Dec 2017: "CCC didn't plan on charging the $0.50/repair order fees until the scheduled April 2018 changeover, and it had extended waivers on the $2,500 startup fees". Fincher: "We are not going to charge for Secure Share, and we're not going to change that position." | FAQ · https://www.repairerdrivennews.com/2017/12/19/ccc-secure-share-will-be-free-ems-support-to-remain-indefinitely/ |
| 21 | 2017 fee history: $0.50 per workfile, maybe $2,500 one-time | 07 §2 | CONFIRMED | RDN 20 Jan 2017: "a per-workfile fee of $0.50 starting in April 2018, and for those who register after this year, potentially a one-time fee of $2,500". RDN 16 Mar 2017: "a company with multiple programs will only have to pay $2,500 once" | https://www.repairerdrivennews.com/2017/01/20/ccc-says-secure-share-still-on-track-for-april-bms-switch-drawing-interest-from-familiar-new-companies/ · https://www.repairerdrivennews.com/2017/03/16/ccc-responds-to-announcement-of-cic-task-force-on-secure-share/ |
| 22 | Grantor is CCC, 222 Merchandise Mart Plaza, Suite 900, Chicago | 07 §2 | CONFIRMED | "This website is operated by CCC Intelligent Solutions Inc. at 222 Merchandise Mart Plaza, Suite 900, Chicago, Illinois 60654." | https://www.cccsecureshare.com/Terms |
| 23 | Site is for US persons. App must be commercially available in the US | 07 §2 | CONFIRMED | "We provide this Website for use only by persons located in the United States." "the App must also be commercially available in the United States, and functionality must be demonstrable." | Terms · https://www.cccsecureshare.com/legal/appcategoryguidelines |
| 24 | Register form fields | 07 §2 | CONFIRMED, with additions | Field names: companyDisplayName, firstName, lastName, emailAddress, isCiecaMember, legalAgreementChecked. "Company name must be less than 50 characters." Same limit for first and last name. "Use your Google credentials to complete the registration process." The agreement text loads only after step 1 posts to "internalapi/registration/savelead". So you cannot read the Developer Registration Agreement without sending step 1 | register JS above |
| 25 | Agreement text is not public | 07 §2, §9 | CONFIRMED | RDN 27 Apr 2017: "We asked CCC for complete copies of the CCC ONE and Secure Share terms of use ... CCC declined, calling both documents confidential." 2017 names: "CCC Secure Share Registration agreement and CCC Secure Share Application Publishing Agreement" | https://www.repairerdrivennews.com/2017/04/27/from-cic-a-potential-surprise-for-shops-in-cccs-terms-of-use/ · https://www.repairerdrivennews.com/wp-content/uploads/2017/08/ccc-responses-to-first-and-second-task-force-inquiries-20170725.pdf |
| 26 | Security rules: encryption, background checks, US hosting, audit. No SOC 2 or pen test named | 07 §2 | CONFIRMED | "Personnel with access to PII data should undergo criminal background checks." "All Applications shall be hosted on servers that physically reside in the United States." "All Data shall exclusively be stored in and accessible from the United States." No SOC 2, pen test or insurance text in any public page | guidelines · https://www.cccsecureshare.com/legal/permitteduses |
| 27 | 16 App Categories. None fits AI estimate review | 07 §2 | CONFIRMED | List matches. New category: "please contact the CCC Secure Share team at secureshare@cccis.com" | appcategoryguidelines |
| 28 | Nearest fits are "OEM Procedures" and "Detailed Reporting" | 07 §0 | PARTLY CONTRADICTED | Detailed Reporting: "ingests data for the purpose of detailed reporting of estimates in aggregate ... All data must be non-identifiable to the consumer and vehicle." That excludes per-repair work. OEM Procedures: "correlate estimate lines to OEM procedures such that a user may see the OEM procedures related the estimate at hand." | appcategoryguidelines |
| 29 | "Workflow/Audit" is for insurer or TPA review | 07 §2 | CONFIRMED | "specifically for quality review, audit, field review, desk review, and/or reinspection by an insurer or third party administrator." | appcategoryguidelines |
| 30 | Permitted Use bans "a collision estimating database, parts catalog or price list" | 07 §0 | CONFIRMED, exact text is wider | "directly or indirectly, reverse engineer or otherwise attempt to construct (through compilation or otherwise) a collision estimating database, parts catalog or price list, or to create any database of the same" | permitteduses (Last Modified: March 17, 2017) |
| 31 | Other Permitted Use bans and 90-day deletion | 07 §2 | CONFIRMED | "transformation of the Data into CIECA EMS format". "to present to any third party the Data in repair estimate form". "delete any Data ... within 90 days after termination". "along with EMS, be your sole source of the Data from CCC products and services" | permitteduses |
| 32 | Illinois law, Chicago arbitration, class waiver, 1-year claims limit | 07 §2 | CONFIRMED for the website Terms only | "governed by ... the laws of the State of Illinois". "binding arbitration ... in Chicago". "within one (1) year". The law of the two agreements is UNVERIFIED | Terms (Last Modified: September 29, 2016) |
| 33 | No formal app certification | 07 §2 | PARTLY CONTRADICTED | CIC task force, 2017, quoting the license: "CCC may require or offer Certification for your Applications to comply with CCC's guidelines, else the agreement is terminated." CCC did not deny it: "For precise language and context, we refer you to those documents." Current text UNVERIFIED | task force PDF above, Q-4 |
| 34 | Uptime rule and 10,000 transactions per hour | 07 §2 | CONFIRMED | "48 hours of downtime between the hours of 6AM and 8PM Central Time in the last 7 days". "10,000 transactions per hour." | guidelines (Last Updated December 18, 2017) |
| 35 | Review time was 1 week in 2017 | 07 §2 | CONFIRMED, no newer data | RDN Dec 2017: "registered on a Friday and was integrated and live on Secure Share by the following Friday." RDN Aug 2017: "it'd only denied one registration from an 'unrelated, outside' company which 'seemed a bit fraudulent.'" | RDN 19 Dec 2017 · https://www.repairerdrivennews.com/2017/08/14/ccc-not-backing-down-from-2018-ems-sunset-date-explains-changes-positions-on-secure-share/ |
| 36 | Field list per category is only behind log-in | 07 §2 | CONFIRMED, with addition | "Complete data fields available to each App Category are available to registered users ... at www.cccsecureshare.com/docs". Public message pages show "Hardcoded to "5.4.0" representing the CIECA BMS 5.4.0 (2016 R2)." | appcategoryguidelines · https://www.cccsecureshare.com/legal/limitedpartsmessages |
| 37 | CCC EMS folder export is free to the shop. No CCC approval needed | 06 §1 | CONTRADICTED | CCC ONE terms, 2017 excerpt: "EMS Extract (Applicable if the EMS Extract Feature is licensed as specified in a Product Schedule.)" Third-party use only "as expressly permitted in writing in advance (i) by the contracting entity for whom the estimate was created, including ... the insurance company ... or (ii) by the consumer". CCC help: "You must have the communicating and EMS features enabled". The current terms are not public | RDN 27 Apr 2017 above · https://cccis.zendesk.com/hc/en-us/articles/360042735691-Working-with-EMS-Estimate-Management-Standard |
| 38 | cccone.com redaction "can strip the VIN" | 06 §1 | PARTLY CONTRADICTED | Job aid ©2024: "Redact VIN - Retains only the last 8 characters of the VIN." CCC release 16 Jan 2024: "redact the last six digits of a Vehicle Identification Number". CCC's own documents disagree on which part stays. Either way a part of the VIN goes | AddRemoveEMSPaths.pdf · https://www.cccis.com/news-and-insights/posts/ccc-one-includes-advanced-data-privacy-feature-for-repairers |
| 39 | Over 60 companies use Secure Share, Jan 2025 | 06 §5 | CONFIRMED | "Secure Share has more than 60 companies leveraging the network". Jan 2024: "Today over 40 unique companies use CCC SecureShare" | https://www.cccis.com/news-and-insights/posts/ccc-intelligent-solutions-receives-ciecas-electronic-commerce-company-of-the-year-award · privacy feature release above |
| 40 | Shop opt-in at Configure > Secure Share. Developer may accept or reject | 07 §2 | CONFIRMED, with additions | "A third party app developer may accept or reject the request from the collision repairer to share data." 3M guide: "NOT applicable for body shops that do not have admin rights". "It is not uncommon for dealer groups and networks to lock admin rights" | https://www.cccsecureshare.com/Insurance · https://multimedia.3m.com/mws/media/2267264O/repairstack.pdf |
| 41 | v1 on shop upload needs only shop consent. CIECA covers EMS field use | 07 §8 row 2 | CONTRADICTED | See claims 17 and 37. Shop consent alone does not meet the 2017 CCC ONE clause. The clause needs DRP insurer or vehicle owner consent in writing | RDN 27 Apr 2017 |
| 42 | No 2025 to 2026 fee change or refused startup found | 06 §5 | CONFIRMED, but 2 new events | No fee change found. New: CCC sale agreement, 15 Oct 2026. New: class action against CCC, filed 8 Oct 2026, Case 2:26-cv-11794 | https://www.autobodynews.com/news/ccc-intelligent-solutions-agrees-to-6-1-billion-sale-to-gtcr-led-group-including-elliott · https://www.repairerdrivennews.com/2026/10/13/class-action-lawsuit-filed-against-ccc-alleging-consumer-personal-information-misuse/ |
| 43 | App submission needs category, metadata, logo 500x300, support URL, phone, email, Note to Reviewer | 07 §2 | CONFIRMED | "App names must be limited to 50 characters". "Logo size is limited to 500x300". "support URL, phone number, and email address". "Note to Reviewer" | guidelines |
| 44 | Revv must ship a production product first | 07 §0 | CONFIRMED | "Demos, betas, and trial versions do not belong in the Marketplace." | guidelines |
| 45 | Secure Share data types: Estimate, Final Bill, Part Price Changes | 07 §2 | CONFIRMED | "Estimate, Final Bill, and Part Price Changes will be available on Secure Share, but in a CIECA BMS-equivalent data format." | FAQ |
| 46 | Limited Parts Message has only 11 VIN digits | 06 §4.6 | CONFIRMED | "Non-identified VIN, first 11 digits only. Last 6-digits must be obfuscated with zeros." Limited Accounting Message has "Full vehicle VIN." | limitedpartsmessages · https://www.cccsecureshare.com/legal/limitedaccountingmessages |

---

## (b) STEPS tables

### b1. CIECA membership, Technology Corporate Tier 1

| # | Action | Who does it | What you must provide | Output | Cost | Time | Evidence URL | Status |
|---|---|---|---|---|---|---|---|---|
| 1 | Pick the type. Revv sells software, so pick Technology Corporate | Founder | Business model | Type = Technology Corporate | $0 | 5 min | https://www.cieca.com/Membership/pricing | Confirmed |
| 2 | Pick the tier by annual revenue. "$1M or Less" is T1 | Founder | Last 12 months revenue | Plan code T1 | $0 | 5 min | plan feed URL in claim 1 | Confirmed |
| 3 | Pick the payment route. Card on the hosted checkout, or invoice by check or ACH | Founder | Choice | Route | $0 | 5 min | https://www.cieca.com/Membership/membership | Confirmed |
| 3b | Invoice route only: email operations@cieca.com and say you want to join | Founder | Company name, contact, tier | Invoice | $1,000 | Not stated | mailto link on membership page | Confirmed route. Time UNVERIFIED |
| 4 | Card route: open the T1 checkout. Fill Account Information | Founder | First Name*, Last Name*, Email*, Company*, Mobile, Phone*, Website*, Industry, logo permission, announcement permission | Form page 1 | $0 | 10 min | https://account.cieca.com/subscribe/0e3e04f7ea0322df8132c1ce73ed4fac835d327f877b7e75ad482bf477cf719e/T1 | Confirmed |
| 5 | Fill Billing Address | Founder | Street*, City*, State*, Zip*, Country/Region* | Billing record | $0 | 2 min | same | Confirmed |
| 6 | Tick the card-reuse box. It authorizes automatic renewals | Founder | Consent | Auto-renew on card | $0 | 1 min | same: "I agree to use the above card for automatic renewals" | Confirmed |
| 7 | Click Subscribe. This accepts the license and the site privacy terms | Founder, with authority to bind Revv | Acceptance | Signed CIECA IP License Agreement | $0 | 1 min | same: "By clicking ' Subscribe ' you agree to the License Terms & Conditions and Privacy Policy" | Confirmed |
| 8 | Enter card details | Founder | Card | Paid membership | $1,000 | 2 min | Card step did not render | UNVERIFIED |
| 9 | Get sign-in details for cieca.com | CIECA | None known | Portal account | $0 | Not stated | https://www.cieca.com/signin?uri=%2FMessages%2Fstandards-release | UNVERIFIED |
| 10 | Name one Member Representative | Revv | 1 person | Representative on file | $0 | Not stated | Bylaws §1.06: "Each Company and Organization Class Member shall designate one person as its 'Member Representative'" | Confirmed rule. Method UNVERIFIED |
| 11 | CIECA assigns an industry segment | CIECA Board | Line of business | Segment, likely "Information Providers" or "General & Related Services" | $0 | Not stated | Bylaws §3.05 | Confirmed rule. Revv segment UNVERIFIED |
| 12 | Sign in. Download the standards from "Standards Releases". Get BMS 5.4.0, because Secure Share sends 5.4.0 | Revv engineer | Login | EMS Word document, BMS schemas, code lists, guides | $0 | Same day, by CIECA claim | standards-release (login wall) · limitedpartsmessages | Wall confirmed. Content and BMS 5.4.0 availability UNVERIFIED |
| 13 | Add staff with "Add New User" | Revv admin | Staff names and emails | Staff accounts | $0 | Not stated | https://www.cieca.com/Membership/add-new-user (redirects to sign-in) | Page confirmed. Fields UNVERIFIED |
| 14 | Before a contractor sees the standards, sign a written agreement | Revv and contractor | Contract that binds the contractor to the CIECA restrictions and to return or delete | Signed contractor addendum | Legal time | 1 day | terms-conditions §3 | Confirmed |
| 15 | Optional: ask to join the CIECA Slack and committees | Revv | Form | Slack access | $0 | Not stated | https://forms.zoho.com/cieca1au/form/CIECASlackChannelAddRequest | Form confirmed |
| 16 | Each year the card is charged again | CIECA billing | Valid card | Renewal | $1,000 per year at T1 | Yearly | plan feed "billing_cycles": -1 | Confirmed |
| 17 | When revenue passes $1M, move to T2 | Revv | Revenue | T2 at $2,000 | $2,000 per year | Not stated | pricing page | Price confirmed. Who checks revenue UNVERIFIED |
| 18 | To cancel the license, send written notice | Revv | Letter by hand, courier or certified mail to 500 Westover Dr. #11617, Sanford, NC 27330 | Termination | $0 | Not stated | terms-conditions §4.2 and §8 | Confirmed. Refund policy and Zoho cancel steps UNVERIFIED |
| 19 | If membership lapses, stop §2.1 uses or pay the exit payment | Revv | Notice of election plus payment | Fully-paid license to Legacy Versions | 5 x last fee = $5,000 at T1 | Not stated | terms-conditions §2.3 | Confirmed |

### b2. CCC Secure Share, developer side, from zero to live

| # | Action | Who does it | What you must provide | Output | Cost | Time | Evidence URL | Status |
|---|---|---|---|---|---|---|---|---|
| 1 | Finish CIECA steps 1 to 8 | Revv | CIECA membership | Active member | $1,000 per year | Same day | FAQ | Confirmed |
| 2 | Have a lawyer read the Permitted Use Terms and the guidelines against the Revv feature list | Lawyer | Feature list | Go or no-go memo | Legal fee | 1 to 2 weeks, estimate | permitteduses · guidelines | Confirmed need. Time is an estimate |
| 3 | Email CCC before you build. Ask which category fits, and ask for a new category if none fits | Founder | Product description | CCC written answer | $0 | Not stated | appcategoryguidelines: "To request a new App Category, please contact ... secureshare@cccis.com" | Confirmed route. Time UNVERIFIED |
| 4 | Register, step "Company Basics" | Founder | Company name under 50 characters, first name, last name, email, tick "Yes, I am a CIECA member" | Lead saved. CCC sends back the agreement text | $0 | 10 min | https://www.cccsecureshare.com/Register · register JS | Confirmed |
| 5 | Register, step "Registration Agreement". Read and tick "I agree to the Developer Registration Agreement" | Person with authority to bind Revv | Acceptance | Signed Developer Registration Agreement | $0 | Reading time | register JS · Terms: "full legal authority to bind your employer" | Confirmed step. Text UNVERIFIED |
| 6 | Register, step "Login Details". Sign in with a Google account | Founder | Google account | Developer account | $0 | 2 min | register JS: "Use your Google credentials to complete the registration process." | Confirmed |
| 7 | Answer the extra questions and choose a company display name | Founder | Display name, "a few other questions" | Completed profile | $0 | Not stated | register JS | Confirmed that they exist. Questions UNVERIFIED |
| 8 | CCC reviews the registration | CCC | Nothing more known | Approval or rejection | $0 | Not stated | Developers: "Registration applications will be reviewed by CCC" | Confirmed step. Time UNVERIFIED |
| 9 | Read the docs in the dashboard | Revv engineer | Login | API docs, webhooks, samples, data fields per app type, docs versions | $0 | Not stated | FAQ: "once approved, they will have access to technical documentation, APIs, and samples" · docs JS routes "/endpoints", "/webhooks/datasharing", "/webhooks/samples" | Confirmed |
| 10 | Set your cloud endpoint in the "Environments tab". CCC pushes BMS to it on save, lock or manual export | Revv engineer | US-hosted HTTPS endpoint | Test traffic | Hosting cost | Not stated | https://www.cccsecureshare.com/Advisor · /Advisor/part-price-changes | Confirmed |
| 11 | Build to the assigned message. Use BMS 5.4.0. Do not plan on write-back | Revv engineer | Code | Working app | Engineering time | Not stated | /Advisor/part-price-changes · limitedpartsmessages | Confirmed |
| 12 | Before submit: test for crashes, keep backend live, fill accurate metadata | Revv | App in production state | Ready submission | $0 | Not stated | guidelines "Before You Submit" | Confirmed |
| 13 | Submit the app | Founder | App name up to 50 characters, logo up to 500x300, description, category, support URL, phone, email, "Note to Reviewer" | Submission in queue | $0 | 1 hour | guidelines | Confirmed |
| 14 | Sign the Application Registration Agreement. It includes the Permitted Use Terms | Person with authority | Acceptance | Signed ARA | $0 | Reading time | Terms: no marketing "unless you have entered into an Application Registration Agreement" | Confirmed step. Text UNVERIFIED |
| 15 | CCC reviews the app. CCC checks the category, may change it, may reject, assigns the BMS message | CCC | Live backend for the reviewer | Approved app | $0 | "as soon as we can" | guidelines · Developers | Confirmed. Time UNVERIFIED |
| 16 | Possible certification step | CCC | Unknown | Unknown | Unknown | Unknown | 2017 task force Q-4 | UNVERIFIED for 2026 |
| 17 | App goes live in the Marketplace inside CCC ONE | CCC | None | Listing | $0 | Not stated | Repairers page | Confirmed |
| 18 | Each shop turns the app on. See b3 | Shop admin | CCC ONE admin rights | Pending request | $0 | 5 min | AirPro, Profit Forward, 3M guides | Confirmed |
| 19 | Revv approves each shop on the CCC portal | Revv | Shop name, the shop's CCC license ID | Data flow starts | $0 | Not stated | 3M guide: "send the shop name, the RFID and the CCC license ID ... He will then approve the shop on the CCC Portal." · Insurance page | Confirmed |
| 20 | Run the app. Keep uptime. Stay under 10,000 transactions per hour. Get each update reviewed | Revv | Monitoring | Listing stays live | Ops cost | Ongoing | guidelines: standards apply to "updates, modifications and future versions" | Confirmed |
| 21 | On exit, delete each customer's data within 90 days | Revv | Deletion process | Compliance | $0 | 90 days | permitteduses | Confirmed |

### b3. CCC Secure Share, shop side, inside CCC ONE

| # | Action | Who does it | What you must provide | Output | Cost | Time | Evidence URL | Status |
|---|---|---|---|---|---|---|---|---|
| 1 | Get a user with CCC admin rights. In an MSO or franchise, ask corporate IT | Shop | Admin login | Access to Configure | $0 | Minutes to days | 3M guide lists Driven Brands, Fix Auto, ABRA, CARSTAR help desks | Confirmed |
| 2 | Desktop: Configure > CCC Secure Share > Marketplace. Web: cccone.com > Settings > Secure Share tile > Marketplace | Shop admin | None | Marketplace view | $0 | 1 min | https://profitforward.com/documentation/setup/enable-ccc-secure-share/ · https://cccis.zendesk.com/hc/en-us/articles/5015363400852-Secure-Share-asTech | Confirmed |
| 3 | Open the app card. Read the data fields that the app will get | Shop admin | None | Informed choice | $0 | 2 min | AirPro: "On the info page it will show the CCC data that is shared" | Confirmed |
| 4 | Settings: pick the event type. Options include "Workfile Save" and "Estimate Locked", and manual send. Optional filters by insurer and make | Shop admin | Choices | Data rules | $0 | 2 min | https://airprodiagnostics.com/ccc-integration-instructions/ · Insurance page | Confirmed |
| 5 | Confirm with "Swipe to enable" | Shop admin | Consent | Status PENDING | $0 | 1 min | Profit Forward · asTech | Confirmed |
| 6 | Wait for Revv to approve. Status goes to ENABLED | Revv | Approval | Data flows | $0 | Not stated | asTech: "Connection status will go from PENDING to ENABLED once registration is successful." | Confirmed |

### b4. CCC ONE EMS export to Revv, the v1 path in 07

This path needs no CCC approval for Revv. It puts the legal duty on the shop. The clause text is from 2017. The current text is not public.

| # | Action | Who does it | What you must provide | Output | Cost | Time | Evidence URL | Status |
|---|---|---|---|---|---|---|---|---|
| 1 | Check that the shop's CCC Product Schedule includes the EMS Extract feature | Shop | Its CCC contract | Yes or no | Possible CCC fee | Not stated | RDN 27 Apr 2017: "Applicable if the EMS Extract Feature is licensed as specified in a Product Schedule." | 2017 text confirmed. 2026 UNVERIFIED |
| 2 | Get written permission before each estimate goes to Revv. DRP job: from the insurer. Other jobs: from the vehicle owner | Shop | Signed permission | Lawful disclosure | $0 | Per job | same RDN quote, clause (b) | 2017 text confirmed. 2026 UNVERIFIED |
| 3 | Keep the permissions and a list of every third party | Shop | Records | Audit file | $0 | Ongoing | "CUSTOMER agrees to keep all written agreements ... and the identity of all third parties" | 2017 text confirmed |
| 4 | Read the shop's DRP agreements for data clauses | Shop | DRP contracts | Yes or no | $0 | Not stated | SCRS 2015 sample DRP clause: "The Repairer agrees it will not sell or share nor permit its third party vendors to sell or share Information." https://www.repairerdrivennews.com/wp-content/uploads/2018/04/scrs-researches-ems-data-export-options-to-identify-data-pumps.pdf | Confirmed as an example |
| 5 | Turn on EMS export on cccone.com. Needs the permission "Enable import/export EMS and workfile copy on cccone.com" | Shop admin | Windows PC | Data Transfer Application | $0 | 20 min | https://cccis.zendesk.com/hc/en-us/articles/17534585996180-Import-Export-Workfiles-on-cccone-com | Confirmed |
| 6 | Generate a Transfer Key. Paste it in the app | Shop admin | None | Linked app | $0 | 2 min | same | Confirmed |
| 7 | Add an export directory. Type "EMS 2.01 Estimate". Options: location, insurer, vendor, "Exclude customer information", "Redact VIN" | Shop admin | Folder path | EMS files in a folder | $0 | 5 min | AddRemoveEMSPaths.pdf | Confirmed |
| 8 | Revv's folder watcher or upload sends the files to Revv | Revv agent on the shop PC | Installed watcher | Estimates in Revv | $0 | Ongoing | 06 §4.2 CIECA "EMS to CAPIS" model | Confirmed as a CIECA model |

---

## (c) Requirements table

| Requirement | CIECA | CCC Secure Share | Evidence URL | Status |
|---|---|---|---|---|
| Entity | "a person or entity". Bylaws Company Class is for "organizations engaging in business or commerce for profit" | Person who accepts must have "full legal authority to bind your employer or such entity". App must be "wholly owned by Acme" | terms-conditions · bylaws PDF · Terms · /Advisor | Confirmed |
| Country | No rule found. Checkout lists all countries | Site "for use only by persons located in the United States". Banned: "Creating an Application for use outside of the United States" | checkout · Terms · guidelines | CIECA UNVERIFIED. CCC confirmed |
| EIN or tax ID | Not on checkout page 1 | Not on register form | checkout · register JS | Confirmed for the forms. Agreements UNVERIFIED |
| Address | Billing street, city, state, zip, country. Legal notices go "To the address provided by member in the membershiip application process" | Not on register form. Support URL, phone and email at app submit | checkout · terms-conditions §8 · guidelines | Confirmed |
| Insurance | Not stated | Not stated in any public page | all pages above | UNVERIFIED. Ask |
| Security | None | "no less rigorous than accepted industry practices". "All API secret keys and credentials should be encrypted." "Data at rest or in motion over the wire should be encrypted." CCC may "request an audit" | guidelines | Confirmed |
| People checks | None | "Personnel with access to PII data should undergo criminal background checks." | guidelines | Confirmed |
| Hosting | None | "hosted on servers that physically reside in the United States". Data "exclusively be stored in and accessible from the United States" | permitteduses | Confirmed |
| Consent | None | "Apps cannot use or transmit someone's personal data without first obtaining their permission and providing access to information about how and where the data will be used." | guidelines | Confirmed |
| Product state | None | "final, production ready state". "commercially available in the United States" | guidelines · appcategoryguidelines | Confirmed |
| SOC 2, pen test | None | Not named | guidelines | Not in public text. Agreements UNVERIFIED |
| Prerequisite membership | None | Active CIECA membership | FAQ | Confirmed |

---

## (d) Blockers and risks, with quotes

Ranked by impact on Revv. "Who decides" says who can remove the blocker.

| # | Blocker or risk | Exact quote | Source | Who decides | Effect on Revv |
|---|---|---|---|---|---|
| 1 | Shop EMS sharing needs DRP insurer or owner permission in writing | "to transmit the Extract Information to a third party as expressly permitted in writing in advance (i) by the contracting entity for whom the estimate was created, including, but not limited to, the insurance company ... or (ii) by the consumer for whose vehicle the estimate was created in all other cases" | CCC ONE terms quoted at CIC, RDN 27 Apr 2017 | CCC, shop lawyer | The v1 upload path can put the shop in breach. Revv must collect owner consent in the flow, or get CCC to say this clause is gone |
| 2 | Shop indemnifies CCC and accepts audits | "CCC shall have the right to cause an audit ... for a period of twelve (12) months following the expiration and termination". "CUSTOMER hereby agrees to indemnify and hold CCC harmless ... arising from the extraction, use or disclosure" | same | CCC | Shops will ask Revv to carry this risk. Expect an indemnity request in shop contracts |
| 3 | Shop may not compile estimate data into a database | Section 2.4(f) "forbids the repair facility itself to 'compile estimate data for the purpose of creating a database'" | Class action complaint, Case 2:26-cv-11794, filed 10/08/26, p. 15 · https://www.repairerdrivennews.com/wp-content/uploads/2026/10/Complaint-CCC.pdf | CCC | A Revv benchmark or training set built from many shops' CCC estimates is high risk |
| 4 | No write-back | Part price changes only for "Vehicle Diagnostics Reporting", "Parts Procurement" and "Body Shop Management". 2017 task force: "CCC Secure Share does not allow app providers ... to write information back into the estimating system" (question). CCC answer names only the part price change API | /Advisor/part-price-changes · task force Q-27 | CCC | The shop must key supplement lines into CCC ONE by hand. 3M RepairStack sends invoices "received as estimate line items in CCC One Workflow". Its method is UNVERIFIED |
| 5 | Ban on comparison with competitors | "comparison of CCC sourced data, CCC products and CCC services, including but not limited to the estimate costing, labor times, and parts pricing Data therein, to those of CCC's competitors" | permitteduses | CCC | Do not show "CCC labor vs MOTOR or Mitchell" on data from Secure Share |
| 6 | Ban on database building and data mining | "reverse engineer or otherwise attempt to construct (through compilation or otherwise) a collision estimating database". "Do not attempt to reverse lookup, trace, relate, associate, mine, harvest, or otherwise exploit information obtained through CCC Secure Share" | permitteduses · guidelines | CCC | AI training on Secure Share data needs CCC written consent |
| 7 | Ban on estimate-form output to third parties | "to present to any third party the Data in repair estimate form" | permitteduses | CCC | A supplement sent to an insurer can be read as estimate form. Get CCC to say in writing how it reads this |
| 8 | No data passing between companies | "Passing actual estimate data between separate companies is not permitted" | https://www.cccsecureshare.com/Advisor/pass-by-reference | CCC | Ask how CCC treats subprocessors: cloud host, LLM API, Apple iMessage |
| 9 | US-only storage and access | "All Data shall exclusively be stored in and accessible from the United States." | permitteduses | CCC | iMessage delivery and any LLM provider must be US-only, or CCC must accept them. UNVERIFIED for Apple |
| 10 | Category mismatch | Detailed Reporting: "All data must be non-identifiable to the consumer and vehicle." OEM Procedures: "correlate estimate lines to OEM procedures" | appcategoryguidelines | CCC | Revv may get only an "OEM Procedures" field set, or must ask for a new category |
| 11 | Removal without notice, terms change at will | "Apps may be removed from the Marketplace without notice". "CCC reserves the right to change or modify them at any time." Website Terms: "All changes are effective immediately when we post them" | guidelines · Terms | CCC | Platform risk. Keep a non-CCC data path |
| 12 | CCC can build a rival product and sees all traffic | 2017 agreement, as quoted: CCC is not precluded from developing systems "which are competitive with your application ... irrespective of their similarity to your current products". CCC: "When data is received by an application through Secure Share, CCC will be aware of it." | https://www.autobodynews.com/news/cic-what-secure-share-will-mean-for-exchange-of-estimate-data · task force Q-1 | CCC | CCC sells AI estimating. ABN, Oct 2026: AI solutions "bringing in more than $120 million on an annualized basis". CCC will see Revv's shop count |
| 13 | Insurer-only apps banned | "Creating an Application under an insurance company, or that exclusively targets insurance companies." FAQ: "at this time, Secure Share is not available for insurance companies." | guidelines · FAQ | CCC | Revv must stay shop-side |
| 14 | No EMS conversion | "transformation of the Data into CIECA EMS format". "Creating an Application that generates files in the CIECA EMS format" | permitteduses · guidelines | CCC | Do not export Secure Share data as EMS |
| 15 | Possible certification | "CCC may require or offer Certification for your Applications to comply with CCC's guidelines, else the agreement is terminated." | task force Q-4, 2017 | CCC | Unknown extra gate |
| 16 | Admin-rights gate in MSOs | "It is not uncommon for dealer groups and networks to lock admin rights and requires assistance from their internal IT groups" | 3M guide | Shop or MSO IT | Slower roll-out in MSOs and franchises |
| 17 | CCC owner change | "agreed to a $6.1 billion all-cash sale to a GTCR-led group including Elliott". "closing expected in the first quarter of 2027" | ABN Oct 2026 | GTCR, Elliott | The free policy and the terms can change after closing |
| 18 | CCC class action on PII and AI | Plaintiffs ask for "barring CCC from using consumer information for AI training or other purposes beyond the estimate without consent" | RDN 13 Oct 2026 | Court | CCC may tighten data sharing. Revv has the same PII and AI exposure and must get owner consent |
| 19 | CIECA license text gap | §2.1 has no clause for software sold to third parties. "Any use of CIECA IP other than the uses licensed under Section 2 above is prohibited." | terms-conditions | CIECA | Get a written confirmation from CIECA |
| 20 | CIECA EMS version gap | "EMS means CIECA's dBase IV-based Estimate Management Standard Version 2.6 or later." CCC export type "EMS 2.01 Estimate" | terms-conditions · AddRemoveEMSPaths.pdf | CIECA | Ask CIECA if EMS 2.01 use is licensed |
| 21 | DRP contracts can forbid sharing | "The Repairer agrees it will not sell or share nor permit its third party vendors to sell or share Information." | SCRS 2015 sample DRP clause | Insurer | A shop's DRP contract can block Revv even if CCC allows it |

What is not a blocker:
- Fees. Secure Share is $0 today. CIECA is $1,000 per year at Tier 1.
- A small vendor is not shut out. In Aug 2017 CCC said "most of them do compete against us" about its 50 approved registrants.
- Estimate review is approved in practice. ALLDATA Repair Planner "reviews an estimate line-by-line, flagging OEM-specified structural repairs" and is "now available on the CCC Secure Share™ network". https://www.alldata.com/us/en/BLG/repair-planner-ccc

Apps seen on the Marketplace, as evidence of what CCC approves. Categories are not public for any of them.

| App | What it does | Evidence | Category |
|---|---|---|---|
| ALLDATA Repair Planner | Line-by-line estimate review against OEM repair data | ALLDATA blog above | UNVERIFIED. Likely OEM Procedures |
| ORION and AirPro Diagnostics | Scan and calibration | https://airprodiagnostics.com/ccc-integration-instructions/ | UNVERIFIED |
| asTech | Remote diagnostics | cccis.zendesk.com asTech article | UNVERIFIED |
| ABW, by Profit Forward | Shop workflow | profitforward.com page, updated 8 May 2025 | UNVERIFIED |
| 3M RepairStack, 3 apps | Billables invoicing, performance analytics, a third app | 3M PDF | UNVERIFIED |

---

## (e) Unknowns, with the exact question and contact

| # | Exact question | Contact | Why it matters |
|---|---|---|---|
| 1 | "Does the §2.1 license in the CIECA IP License Agreement let a Technology Corporate member sell software that uses CIECA standards to shops that are not CIECA members? Please confirm in writing." | operations@cieca.com · 425-366-8237 · Paul Barry, Executive Director | Contract text and marketing page differ |
| 2 | "The license defines EMS as Version 2.6 or later. CCC ONE exports EMS 2.01. Does our membership license cover reading EMS 2.01 files that a shop exports to us?" | operations@cieca.com | Core v1 data path |
| 3 | "Do the shops that send us EMS files, or receive our output, need their own CIECA license?" | operations@cieca.com | "Who Needs a CIECA License" may reach shops. Repair Providers join as Non-Technology at $750 |
| 4 | "Can a non-US parent company hold the membership for a US subsidiary, or must the US entity hold it?" | operations@cieca.com | Entity choice |
| 5 | "Is BMS 5.4.0, 2016 R2, available to new members from Standards Releases?" | operations@cieca.com | Secure Share sends 5.4.0 |
| 6 | "What is your refund policy if we cancel mid-year, and how do we cancel the auto-renewal in the billing portal?" | operations@cieca.com | Cancellation |
| 7 | "Who checks our revenue tier at renewal, and what proof do you need?" | operations@cieca.com | Tier compliance |
| 8 | "Our app reads a shop's estimate and drafts a supplement for the shop to review and send. Which App Category fits? If none, can you create one, and what data elements would it get?" | secureshare@cccis.com · contact form at https://www.cccsecureshare.com/Contact | Category decides the data |
| 9 | "Is a supplement that our shop customer sends to its insurer a presentation of the Data 'in repair estimate form' under the Permitted Use Terms?" | secureshare@cccis.com | Core feature |
| 10 | "May we use Secure Share data, de-identified, to train or tune our own AI models? Does the 'construct (through compilation or otherwise)' clause apply?" | secureshare@cccis.com | AI roadmap |
| 11 | "May we show a shop how a CCC labor time compares to OEM or DEG guidance? Does that count as comparison 'to those of CCC's competitors'?" | secureshare@cccis.com | Supplement evidence |
| 12 | "May we send estimate data to subprocessors: a US cloud host, a US LLM API provider, and Apple iMessage to the shop's own staff? Are these 'separate companies' under the pass-by-reference rule?" | secureshare@cccis.com | Product architecture |
| 13 | "Is there any API to write supplement lines back into the CCC ONE workfile? How does 3M RepairStack return line items?" | secureshare@cccis.com | Shop workflow |
| 14 | "Please send the current Developer Registration Agreement and Application Registration Agreement for legal review before we register." | secureshare@cccis.com | Text not public. The form shows it only after step 1 |
| 15 | "Do the agreements require insurance, SOC 2, a pen test, or a certification step? What is the current review time?" | secureshare@cccis.com | Hidden gates |
| 16 | "Will the GTCR and Elliott transaction change Secure Share fees or terms?" | secureshare@cccis.com | Platform risk |
| 17 | "Does the current CCC Repair Facility License Agreement still limit EMS Extract disclosure to third parties to cases with written insurer or consumer permission? What does it require today?" | Ask 2 friendly shop owners to read their own CCC contract. Then ask CCC through the shop's CCC account rep | v1 path legality |
| 18 | "Is EMS Extract an extra-cost feature on your CCC Product Schedule?" | Each pilot shop | v1 path cost |
| 19 | "Do your DRP agreements restrict sharing estimate data with a software vendor?" | Each pilot shop | DRP risk |
| 20 | "Which part of the VIN does 'Redact VIN' keep: the last 8 characters or all but the last 6?" | CCC support through a shop · https://cccis.zendesk.com | VIN decode needs the first 11 characters |

---

## Sources read on 18 Oct 2026

CIECA:
- https://www.cieca.com/Membership/pricing
- https://www.cieca.com/Membership/membership
- https://www.cieca.com/Membership/corporate-technology-membership
- https://www.cieca.com/Membership/corporate-non-technology-membership
- https://www.cieca.com/Membership/associations
- https://www.cieca.com/Membership/terms-conditions (CIECA IP License Agreement, page © 2021)
- https://www.cieca.com/Membership/who-needs-a-cieca-license
- https://www.cieca.com/Membership/why-do-i-need-a-cieca-license
- https://www.cieca.com/Membership/cieca-for-startups
- https://www.cieca.com/ems-standards
- https://www.cieca.com/standardsoverview
- https://www.cieca.com/Services-simplified
- https://www.cieca.com/About/member-companies
- https://www.cieca.com/About/contact-us
- https://www.cieca.com/About/cieca-staff
- https://www.cieca.com/About/terms-of-use
- https://www.cieca.com/files/CIECA%20By-Laws%20rev%202022-01-19.pdf
- Plan feeds: Technology Corporate and Non-Technology Corporate, loaded from subscriptions.zoho.com by the membership pages
- Checkout page T1, rendered read-only

CCC Secure Share:
- https://www.cccsecureshare.com/
- https://www.cccsecureshare.com/Developers
- https://www.cccsecureshare.com/Faq
- https://www.cccsecureshare.com/Terms (Last Modified: September 29, 2016)
- https://www.cccsecureshare.com/legal/permitteduses (Last Modified: March 17, 2017)
- https://www.cccsecureshare.com/legal/appstandardsandreviewguidelines (Last Updated December 18, 2017)
- https://www.cccsecureshare.com/legal/appcategoryguidelines (no date shown)
- https://www.cccsecureshare.com/legal/limitedpartsmessages
- https://www.cccsecureshare.com/legal/limitedaccountingmessages
- https://www.cccsecureshare.com/Repairers
- https://www.cccsecureshare.com/Insurance
- https://www.cccsecureshare.com/Advisor and its 5 sub-pages
- Public JavaScript: /bundles/register, /bundles/documentation, /bundles/landingPage
- /Marketplace, /Apps and /About return 404

CCC ONE:
- https://help.cccis.com/learning/rf/prod-category/setupconfig/AddRemoveEMSPaths.pdf (©2024)
- https://cccis.zendesk.com/hc/en-us/articles/360042735691-Working-with-EMS-Estimate-Management-Standard
- https://cccis.zendesk.com/hc/en-us/articles/17534585996180-Import-Export-Workfiles-on-cccone-com
- https://cccis.zendesk.com/hc/en-us/articles/5015363400852-Secure-Share-asTech
- https://www.cccis.com/policy/ccc-one-data (Last Updated: January 2026)
- https://www.cccis.com/news-and-insights/posts/protecting-your-shops-data
- https://www.cccis.com/news-and-insights/posts/ccc-one-includes-advanced-data-privacy-feature-for-repairers (16 Jan 2024)
- https://www.cccis.com/news-and-insights/posts/ccc-intelligent-solutions-receives-ciecas-electronic-commerce-company-of-the-year-award (8 Jan 2025)

Trade press and partner pages:
- https://www.repairerdrivennews.com/2016/10/27/ccc-stands-by-0-50estimate-cost-as-vendors-argue-itll-be-passed-down-to-shops/
- https://www.repairerdrivennews.com/2017/01/11/ahead-of-cic-bms-discussion-ccc-addresses-misconceptions-about-secure-share/
- https://www.repairerdrivennews.com/2017/01/20/ccc-says-secure-share-still-on-track-for-april-bms-switch-drawing-interest-from-familiar-new-companies/
- https://www.repairerdrivennews.com/2017/03/16/ccc-responds-to-announcement-of-cic-task-force-on-secure-share/
- https://www.repairerdrivennews.com/2017/04/27/from-cic-a-potential-surprise-for-shops-in-cccs-terms-of-use/
- https://www.repairerdrivennews.com/2017/08/14/ccc-not-backing-down-from-2018-ems-sunset-date-explains-changes-positions-on-secure-share/
- https://www.repairerdrivennews.com/wp-content/uploads/2017/08/ccc-responses-to-first-and-second-task-force-inquiries-20170725.pdf
- https://www.repairerdrivennews.com/2017/11/10/enterprise-other-major-players-snub-ccc-secure-share-standoff-could-disrupt-shop-workflows-in-18/
- https://www.repairerdrivennews.com/2017/12/19/ccc-secure-share-will-be-free-ems-support-to-remain-indefinitely/
- https://www.autobodynews.com/news/cic-what-secure-share-will-mean-for-exchange-of-estimate-data
- https://www.repairerdrivennews.com/2026/10/13/class-action-lawsuit-filed-against-ccc-alleging-consumer-personal-information-misuse/
- https://www.repairerdrivennews.com/wp-content/uploads/2026/10/Complaint-CCC.pdf
- https://www.autobodynews.com/news/ccc-intelligent-solutions-agrees-to-6-1-billion-sale-to-gtcr-led-group-including-elliott
- https://www.repairerdrivennews.com/wp-content/uploads/2018/04/scrs-researches-ems-data-export-options-to-identify-data-pumps.pdf
- https://www.alldata.com/us/en/BLG/repair-planner-ccc
- https://airprodiagnostics.com/ccc-integration-instructions/
- https://profitforward.com/documentation/setup/enable-ccc-secure-share/
- https://multimedia.3m.com/mws/media/2267264O/repairstack.pdf

Not reachable: bodyshopbusiness.com returned 403. sec.gov returned 403. Neither was needed for a fact in this file.