# 09 - Red team: reference-data licenses (VIN data, I-CAR, DEG, CAPA, Car-Part, CDI, RI DBR, OEM1Stop)

Research date: 2026-10-18. Scope: Revv (US startup, AI estimating and supplements for collision shops).
Goal: find every step to permitted commercial use, and break the claims in files 01, 02 and 08.

Method:
- I read live pages, page HTML, JS bundles, PDFs, public JSON and form definitions.
- I did not submit a form, sign up, log in or use a key.
- I read sign-up flows from the client JS only. I did not test them.
- I made all reads on 2026-10-18, unless a row gives a different date.
- "Wayback" means the Internet Archive copy, because the live host blocked this machine.
- Raw pages are in the session scratchpad (`forkA/`, `forkB/`, `forkC/`) under `/private/tmp/claude-501/-Users-puneetbhatt-Documents-ChatGPT-proofline-landing/70ab555d-c176-4dae-8674-9524a4c1f567/scratchpad/`. These files are temporary.

Labels:
- CONFIRMED: a source read today says the same.
- CONTRADICTED: a source read today says something different.
- UNVERIFIED: no source read today backs it.

## Top corrections (read these first)

1. **MarketCheck has 2 sets of terms. The sign-up binds the stricter one.** The developer portal links its own "Terms of Service v2", "Last updated Aug 14, 2026", "Effective since Sep 14, 2026", under Delaware law. File 08 quoted the marketing-site terms (2026-03-24, New York law).
2. **MarketCheck v2 bans storing API responses past a single request.** Revv cannot keep NeoVIN options or paint data on a saved estimate unless it has an Enterprise agreement (§7.4).
3. **MarketCheck asks for a card at sign-up, also on the Free plan** (client code, not tested). The Free plan is "solely for evaluation and development purposes" (AUP §2.3).
4. **The MarketCheck AI ban is wider than file 08 says.** It also bans "evaluate, validate, benchmark", RAG corpora and vector databases. Only in-session use that is then discarded is allowed.
5. **VinAudit Self-Service does not allow display to third parties.** Revv's SaaS use needs written authorization. File 02 said it was "usable". That is CONTRADICTED.
6. **The "Revv" on the I-CAR Sustaining Partner list is Revv ADAS (revvhq.com).** It is not this company. Revv ADAS markets ADAS calibration identification "during the first estimate". This is a name and trademark risk, and also a competitor.
7. **A precedent for an I-CAR license exists.** The Audatex DBRM (©2025) says: "we acknowledge I-CAR for permission to reproduce materials contained herein". The 2018 Sustaining Partner launch listed "licensing of I-CAR intellectual property" as a partner benefit.
8. **The I-CAR route is VP Industry Relations, not the copyright complaint inbox.** I-CAR publishes no licensing email.
9. **The CAPA number 616-245-5347 is a fax, not a phone.** CCC and Mitchell get CAPA status from part suppliers. They do not get it from a CAPA license.
10. **The CDI API data can hold shop owner name, phone and email.** The app's shop table defines these fields. This creates a privacy review item for storage.

---

## (a) Claims check

### MarketCheck and VIN alternatives (file 08 §2, file 02)

| # | Prior claim | Label | Evidence: URL, exact quote (read 2026-10-18) |
|---|---|---|---|
| A1 | Grantor: Market Check Cars, Inc., "a Nevada corporation", 169 Madison Ave STE 57434, New York | CONFIRMED | Both sets of terms. Portal ToS v2: "Market Check Cars, Inc., a Nevada corporation" |
| A2 | Free $0, 500 calls/mo, 5 calls/s. Basic $299/mo + data fee, 5,000 calls. Standard $749/mo + data fee, unlimited, 40 calls/s. Enterprise "Inquire", "Full bulk data feed delivery" | CONFIRMED | https://www.marketcheck.com/apis/pricing/ . Quota doc: Standard and Enterprise "No fixed quota (pay-per-use)" (https://docs.marketcheck.com/docs/get-started/api/quota-and-rate-limits.md) |
| A3 | Per-call fees: NeoVIN $0.08, Basic VIN $0.0015, VIN History $0.006, Inventory Search $0.002 | CONFIRMED | Pricing page. Also "MarketCheck Price US USED Premium Plus ... full NeoVIN decode ... $0.13" |
| A4 | Data cost over $1,000 is billed early | PARTLY CONTRADICTED | Pricing page says $1,000. Portal ToS v2 §2.3: "Where your tier specifies a billing threshold (e.g., $250 / $500 / $1,000), accrued usage that exceeds the threshold may be invoiced and charged immediately" |
| A5 | NeoVIN on the Free plan: UNVERIFIED | STILL UNVERIFIED. Probably yes | Portal subscriptions JS: "All self-serve plans include the full API + MCP surface." NeoVIN doc: "Try it with a free API key". Conflict: the Free card on the pricing page does not list "Access to every API endpoint" |
| A6 | Card on the Free plan: UNVERIFIED | CONTRADICTED. A card is asked | Portal route /complete-signup, step 2 "Add a payment method", "One last step before you're in.", fields "Card Details" (Stripe) and "Name on Card". Text: "You start on Free: 500 calls a month with no per-call charges ... Nothing is charged on Free." Skips only for invited team members: "so no card needed" |
| A7 | "Entity: Not required by terms" | PARTLY CONTRADICTED | ToS v2 §1.2: "a valid business email address, your real name, your real company affiliation (where applicable), and a working payment method". "Company name", "Country" and "Industry" are required fields |
| A8 | Sign-up "renders by JavaScript; fields not read" | RESOLVED | See MarketCheck steps 1-3 |
| A9 | Restriction quotes from ToS 2026-03-24 | CONFIRMED but SUPERSEDED for portal users | Quotes are word for word at https://www.marketcheck.com/terms_of_service/ . Portal ToS v2 at https://developers.marketcheck.com/terms is stricter |
| A10 | §6 "integration into commercial products, may require a separate written enterprise agreement" | CONFIRMED in the marketing ToS only | marketcheck.com §6: "Certain uses of the Service, including but not limited to high-volume access, bulk data retrieval, production deployment at scale, or integration into commercial products, may require a separate written enterprise agreement ... MarketCheck reserves the right to determine, at its sole discretion". Portal v2 has no such clause. Its enterprise clause is §7.4 (caching, snapshots, bulk) |
| A11 | Governing law New York | CONTRADICTED for the portal | Portal ToS v2: "governed by the laws of the State of Delaware, USA" |
| A12 | AI apps allowed if data is accessed in real time | NARROWED | v2 §6.1(f): in-context use "within a real-time conversational session ... rendered to that end user and then discarded ... provided that you do not persist the response, the context window, or the conversation history" |
| A13 | Price changes "with at least 30 days notice" | CONFIRMED | Both. v2 §2.2 "on 30 days' notice" |
| A14 | Contacts support@ and info@ | CONFIRMED but incomplete | v2 §17 adds legal@marketcheck.com, security@marketcheck.com, "Commercial / API questions: api@marketcheck.com". AUP adds abuse@marketcheck.com |
| A15 | NeoVIN coverage: window sticker 2012+, OEM 2018+, listings 2015+. Color code sample "PAU" | CONFIRMED | https://docs.marketcheck.com/docs/guides/neovin/data.md and data-dictionary.md. The color schema also has a `confidence` field |
| A16 | "Do not store decodes in bulk" | UNDERSTATED | v2 bans all persistence past a single request (see blockers) |
| A17 | vPIC: 145 variables. Trim, Trim2, Base Price present. No color or paint | CONFIRMED | GetVehicleVariableList, Count 145 |
| A18 | vPIC rate control, batch max 50, standalone DB | CONFIRMED | https://vpic.nhtsa.dot.gov/api/ ("Version: 4.10 Last Code Change 10/17/2026"). https://vpic.nhtsa.dot.gov/Downloads ("vPICList_lite_2026_10") |
| A19 | CarAPI $199/$249/$299 per year. 1,500/3,000/6,000 calls per day. Overage $0.001/call | CONFIRMED | https://carapi.app/pricing/ |
| A20 | CarAPI cards and table conflict | CONFIRMED | Cards show "VIN Decode API" on all 3 plans. Table shows "—", "—", "✓" (Premium only) |
| A21 | CarAPI caching "Yes, absolutely" | CONFIRMED | FAQ: "Yes, absolutely. We advise you to cache data as you request it from CarAPI." |
| A22 | VinAudit Trial 100 queries. Self-Service $100/mo + $0.10/query, "For qualifying developers and early-stage startups only" | CONFIRMED | https://data.vinaudit.com/pricing |
| A23 | VinAudit Window Stickers API "Coming soon" | CONFIRMED | https://data.vinaudit.com/window-stickers-api |
| A24 | VinAudit "Usable for decode and history" | CONTRADICTED for SaaS use | https://data.vinaudit.com/terms : license only for "Customer's own internal business purposes, and not for resale, redistribution, sublicensing, or providing the Services or data to any third party" |
| A25 | DataOne "Request a Quote", no prices | CONFIRMED | https://www.dataonesoftware.com/faqs : "You may have noticed that our pricing is not listed." |
| A26 | Vehicle Databases price PDF not extracted | RESOLVED | https://vehicledatabases.com/pricing.pdf p.3-4 (see steps) |

### I-CAR, DEG, OEM1Stop (file 08 §3, §4, §5c; file 01)

| # | Prior claim | Label | Evidence |
|---|---|---|---|
| B1 | I-CAR terms ban commercial use without permission | CONFIRMED | https://info.i-car.com/getmedia/469d233f-fd07-43e1-8b5a-e098b39a37b3/website-terms-and-conditions.pdf : "You may not use the content or features available at the Site for any commercial purpose without permission from I-CAR." |
| B2 | Terms PDF has "no date" | PARTLY CONTRADICTED | The text has no date. PDF metadata creationDate is 2025-11-20. "Document ID #: 813", "Revision #: 1". I-CAR can change terms "without any obligation on the part of I-CAR to notify you" |
| B3 | Governing law Illinois | CONFIRMED | Same PDF |
| B4 | intellectualproperty@i-car.com is the complaint address, not licensing | CONFIRMED | Same PDF: "If you are a trademark or copyright owner and you believe that your trademark or copyright rights have been violated, please contact intellectualproperty@i-car.com". Questions on the terms go to privacyservices@i-car.com |
| B5 | No licensing contact published | CONFIRMED. A better route found | https://info.i-car.com/governance/leadership : "Jeff Peevy Vice President, Industry Relations". No email published. Phone (800) 422-7872, (847) 590-1198 (https://info.i-car.com/contact-us) |
| B6 | Sustaining Partner = "annual subscription", no fee published | CONFIRMED | https://info.i-car.com/contact-us/services-and-information-providers : "The Sustaining Partner program is an annual subscription. Contact us to learn more". No fee in any source found |
| B7 | Information Providers list incl. CCC, ALLDATA, asTech, OEC, Revv. No Mitchell or Solera | CONFIRMED with 1 gap | https://info.i-car.com/sustaining-partners . "Entegral" is not a linked entry in the HTML: UNVERIFIED. "Mitchell" and "Solera" appear 0 times |
| B8 | "Revv" on the list is the ADAS company | CONFIRMED | https://info.i-car.com/sustaining-partners/revv returns "301 Moved Permanently", "Location: https://www.revvhq.com/". Title "Revv ADAS \| AI-Powered ADAS Calibration Reporting for Repair Shops" |
| B9 | Revv ADAS "now merged with AirPro" | UNVERIFIED | revvhq.com does not mention AirPro |
| B10 | The partner page lists no benefits and does not tie RTS data to the program | CONFIRMED today. CONTRADICTED in history | 2018-01-18 press release (https://info.i-car.com/press-room/2018/i-car%C2%AE-unveils-sustaining-partner-program-to-help): "All Repairability Technical Support (RTS) information and related services" and "Special discounted partner pricing on ... licensing of I-CAR intellectual property" |
| B11 | No public RTS license or API integration with CCC or Mitchell | CONFIRMED (none found). A licensing precedent exists | Audatex DBRM AE375DBRM-0425, p.10 (https://degweb.org/wp-content/uploads/2025/05/DatabaseReferenceManual-4-25.pdf): "we acknowledge I-CAR for permission to reproduce materials contained herein (clearly marked as I-CAR materials)" |
| B12 | Step 1: email intellectualproperty@i-car.com | CONTRADICTED (wrong route) | Use the Information Providers form, or phone and ask for VP Industry Relations |
| B13 | RTS restates OEM content. I-CAR right to license it UNVERIFIED | CONFIRMED as a risk | https://rts.i-car.com/oem-calibration-requirements-search.html : "Information displayed in quotes ("") are direct quotes from the OEM-specific/vehicle-specific information" |
| B14 | RTS calibration search: free to view, 34 makes, MY 2014-2026 (file 06) | Free view CONFIRMED in HTML. Counts UNVERIFIED | No login gate in the HTML. The internal API /laravel/api/ymm/options/makes returned 46 makes and /years 2007-2027. These lists are for all RTS searches, not only calibration |
| B15 | DEG is "created and funded by AASP and SCRS" | CONFIRMED, but DEG's own pages disagree | https://degweb.org/about-deg/ says AASP and SCRS. FAQ (https://degweb.org/inquiry-process/): "initially funded by the ASA, AASP, and SCRS". Sponsorship page: "We receive our funding from ... AASP, ASA and SCRS." ASA can also be a stakeholder |
| B16 | DEG has no terms page | CONFIRMED | /terms, /terms-of-use, /terms-and-conditions, /terms-of-service/, /legal/, /copyright/, /disclaimer/ all 404. robots.txt "User-agent: * / Disallow:" |
| B17 | DEG footer "© Copyright 2026 ... All Rights Reserved". Privacy "Last updated January 23, 2023" | CONFIRMED | https://degweb.org/privacy-policy/ : "Database Enhancement Gateway (doing business as The DEG)" |
| B18 | DEG sponsorship $4,000/$2,500/$1,000/$250 per year. Logos only. JOC review | CONFIRMED | https://degweb.org/sponsorship-inquiry/ |
| B19 | DEG contacts: Danny Gredinberg (302) 423-0207. aaron@scrs.com. info@autoserviceproviders.com | CONFIRMED | https://degweb.org/contact-us/ . admin@degweb.org is in the privacy notice, not on the contact page |
| B20 | The inquiry form has no rights assignment | CONFIRMED (new check) | https://degweb.org/submit-a-database-inquiry/ has no terms or license checkbox. It shows "We are currently upgrading our systems. We will be online shortly." |
| B21 | Hour values in IP responses are IP data | CONFIRMED as the IP position. A reuse ban is UNVERIFIED | Audatex DBRM: "All labor times included in Audatex products are the property and proprietary information of Audatex." No IP term about DEG responses found |
| B22 | OEM1Stop grantor "OEM Collision Repair Roundtable, Inc." | CONFIRMED | https://www.oem1stop.com/content/what-oem-collision-repair-roundtable : "incorporated as a non-profit 501(c)(6) corporation in 2012" |
| B23 | OEM1Stop terms: no copy or storage without written permission. No linking clause | CONFIRMED | https://www.oem1stop.com/content/terms-use : "may not, except where otherwise indicated, be reproduced, transferred, distributed or stored without prior written permission by OEM Collision Repair Roundtable, Inc. Modifications to the contents of the web site are expressly prohibited." robots.txt: "Crawl-delay: 10", "Disallow: /search/" |
| B24 | admin@oem1stop.com | CONFIRMED | mailto label "OEM1Stop Administrator". The page does not say this inbox handles permissions |
| B25 | OEM PDFs are OEM copyright | CONFIRMED as a risk | https://www.oem1stop.com/position-statements : 215 PDF links. 151 on oem1stop.com, 64 on www.gmparts.com |

### CAPA, Car-Part, CDI, RI DBR (file 08 §6, §7a, §8; file 02)

| # | Prior claim | Label | Evidence |
|---|---|---|---|
| C1 | CAPA: "non-commercial, educational, and personal use only" | CONFIRMED | https://www.capacertified.org/About/CapaCopyrightGuidelines |
| C2 | CAPA: commercial use "with permission", "case-by-case" | CONFIRMED | Same page |
| C3 | CAPA phone "800-505-2272, 616-245-5347" | CONTRADICTED | https://www.capacertified.org/About/ContactUsForm : "P: 1-800-505-2272", "F: 616-245-5347" (fax). Address "4700 Broadmoor SE Suite 200 Kentwood, MI 49512" |
| C4 | CAPA permission contact | CONFIRMED | The copyright page links "Contact Regarding CAPA Copyright Guidelines" to the contact form. CAPA publishes no email |
| C5 | No CAPA feed to CCC or Mitchell | CONFIRMED and stronger | RDN 2025-04-29 (https://www.repairerdrivennews.com/?p=196361). CCC: "The CAPA certification status comes directly from the part supplier's system." Mitchell: "comes from third-party parts vendors" |
| C6 | Part Search is public with the listed fields | CONFIRMED | Form `POST /PartSearch/SendData` with `__RequestVerificationToken` (anti-forgery token) |
| C7 | CAPA ended emailed lists Dec 2025. 57 parts decertified in 2025 | CONFIRMED | RDN 2026-01-26 |
| C8 | Car-Part copy page: use only "as it is integrated" in Car-Part products | CONFIRMED | https://www.car-part.com/copy ("Updated: May 30, 2025"): "You are not permitted to use Car-Part's Automotive Intelligence except as it is integrated, and intended for use, within Car-Part products and services." |
| C9 | Car-Part website terms quotes (registrations, trade secret, Kentucky) | CONFIRMED with a scope note | https://util.car-part.com/terms.html is headed "CAR-PART.COM TOOLS FOR RECYCLERS WEBSITE TERMS". These terms cover the recycler site, not the public search. The car-part.com home page returned 403. Its /terms.html returned 404 |
| C10 | iPro integrates with "all 3 major estimating systems" | CONFIRMED, more exact today | https://pro.car-part.com/integration/ : "Two-way integraton with Mitchell Estimating System"; "Parts Portal Integration with CCC and Audatex" |
| C11 | Car-Part Pro in Mitchell RepairCenter ToolStore "at no additional cost" | UNVERIFIED (old, undated) | No current Car-Part page names ToolStore |
| C12 | Car-Part contacts info@Car-Part.com, (859) 344-1925 | CONFIRMED. Address added | https://products.car-part.com/sales.html : "please call (859) 344-1925 or email Sales@Car-Part.com" |
| C13 | CDI API HTTP 200, JSON, 338,599 bytes, no key | CONFIRMED | Headers: `server: Microsoft-IIS/10.0`, `cache-control: no-cache`. New: `access-control-allow-origin: *` |
| C14 | CDI `/`, `/swagger`, `/robots.txt` 404 | CONFIRMED | `/api` and `/api/v1` also 404 |
| C15 | 94 orgs, 171 companies, 947 uploads. 2026: 5,879 shops, created 2026-01-26 | CONFIRMED | 2023 = 5,673, 2024 = 5,612, 2025 = 5,862, 2026 = 5,879 shops |
| C16 | JSON returns internal user GUIDs | CONFIRMED, smaller than stated | 1 distinct GUID, 4 times. No emails in the list endpoint |
| C17 | CDI "public domain ... seek permission directly from the owning (or holding) sources" | CONFIRMED with a caveat | https://www.insurance.ca.gov/privacy-policy/ , "Ownership". The date "October 9, 2015" sits next to the HIPAA heading. Whether it applies to "Ownership": UNVERIFIED |
| C18 | Contact WebAssist@insurance.ca.gov | UNVERIFIED | Not on any page read. Pages give CDIPrivacyOffice@insurance.ca.gov and https://cdiapps.insurance.ca.gov/contactus/default.aspx |
| C19 | RI DBR labor rate bulletins: no prior claim | NEW | See RI DBR steps |

---

## (b) STEPS per program

Column "Status": CONFIRMED (source says this step), INFERRED (logical step, no source), UNVERIFIED (unknown).

### b1. MarketCheck API / NeoVIN

| # | Action | Who | What you must provide | Output | Cost | Time | Evidence URL | Status |
|---|---|---|---|---|---|---|---|---|
| 1 | Create an account at /sign-up | Founder | Email address, Password, Confirm password, Region (North America / United Kingdom), consent checkbox, reCAPTCHA | Account, then "Check your inbox" email verification | $0 | Minutes | https://developers.marketcheck.com/sign-up (JS chunk teKnldz0.js) | CONFIRMED (code) |
| 2 | Complete the profile | Founder | First name, Last name, Company name (required), Website, Country (required), Industry (required), "How did you hear about us?", "What are you building?" | Profile | $0 | "Takes 30 seconds." | /complete-signup (chunk DqO9MCjA.js) | CONFIRMED (code) |
| 3 | Add a payment method | Founder | Card (Stripe), Name on Card, address line 1/2, city, state, ZIP | Free plan active | $0 on Free | Minutes | Same chunk: "Add a payment method" | CONFIRMED (code). Not tested |
| 4 | Accept the terms. The checkbox binds ToS v2, AUP, Privacy Policy and DPA | Founder | Click | Contract | $0 | Same step | Checkbox: "I understand that the MarketCheck API and data may not be used to train AI models, build a competing product, redistribute or sub-license the data, or cache responses beyond what is permitted in the Terms." | CONFIRMED (code) |
| 5 | Generate an API key and client secret | Founder | None | Key, optional IP allowlist and endpoint limits | $0 | Minutes | https://docs.marketcheck.com/docs/get-started/api/authentication.md | CONFIRMED |
| 6 | Accept provider agreements, only for third-party endpoints (recalls, title, plate) | Team owner | Click | Endpoint enabled | Per-call fee | Minutes | /api-agreements: "You (or your team) need to accept each provider's downstream-use terms once" | CONFIRMED (code) |
| 7 | Test NeoVIN. Evaluation only | Engineer | None | Test decodes | $0, 500 calls/mo | Same day | AUP §2.3 | CONFIRMED (NeoVIN on Free UNVERIFIED) |
| 8 | Add a billing contact, then subscribe to Basic or Standard | Founder | Billing contact email | Paid plan for production | $299 or $749/mo + $0.08 per NeoVIN call | Minutes | Subscriptions JS: "We need one on file before you subscribe to a paid plan." | CONFIRMED |
| 9 | Get written permission or an Enterprise agreement to store decodes on estimates and to use data with AI | Founder to api@marketcheck.com, cc legal@marketcheck.com | Use case, volume, retention period, AI flow | Signed agreement or written permission | UNVERIFIED (no public price) | UNVERIFIED | ToS v2 §6.1, §7.4 | UNVERIFIED |
| 10 | On request, show "Data powered by MarketCheck" | Revv | UI credit | Attribution | $0 | n/a | ToS v2 §8.1 | CONFIRMED |

### b2. VinAudit Data

| # | Action | Who | What you must provide | Output | Cost | Time | Evidence URL | Status |
|---|---|---|---|---|---|---|---|---|
| 1 | Sign up | Founder | Full name, Business Email (or Google), NMVTIS checkbox: "will not be used to sell or resell vehicle history reports directly to consumers." | Trial account | $0, "Up to 100 queries" | Minutes | https://data.vinaudit.com/signup | CONFIRMED. Card on trial UNVERIFIED |
| 2 | Subscribe to Self-Service | Founder | Card | API access | "$100/mo" charged "immediately upon activation" + "$0.10/query". Card fee "up to three percent (3%)" | Minutes | https://data.vinaudit.com/pricing ; /terms §8 | CONFIRMED |
| 3 | Get written authorization for display to shops, retention over 30 days, and AI use | Founder via https://data.vinaudit.com/schedule-meeting | Use case, volume | Enterprise contract ("Tailored licensing & contracts", "Security & compliance review") | UNVERIFIED | UNVERIFIED | /terms §4-6 | UNVERIFIED. Required for Revv |

### b3. CarAPI

| # | Action | Who | What you must provide | Output | Cost | Time | Evidence URL | Status |
|---|---|---|---|---|---|---|---|---|
| 1 | Register | Founder | Email, password, confirm, ToS checkbox. "No payment required until you want to access the full dataset." | Demo data (MY 2015-2020) | $0 | Minutes | https://carapi.app/register | CONFIRMED |
| 2 | Buy Premium (the table says VIN decode is Premium only) | Founder | Card (Stripe Checkout) | Full data 1990-2027 | $299/yr | Minutes | https://carapi.app/pricing/ | CONFIRMED (cards and table conflict) |
| 3 | Ask in writing which plan has VIN decode | Founder via https://carapi.app/contact (name, email, comments) | Question | Written answer | $0 | UNVERIFIED | /contact | UNVERIFIED |

Note: CarAPI colors are "color name and RGB values". No OEM paint code.

### b4. DataOne

| # | Action | Who | What you must provide | Output | Cost | Time | Evidence URL | Status |
|---|---|---|---|---|---|---|---|---|
| 1 | Request a trial (HubSpot form) | Founder | Required: first name, last name, email, company, website URL, industry usage, trial type, "How will the data be used?". Optional: phone | Manual review, then "15 DAYS. 50 VINS." | $0 | UNVERIFIED | https://vins.dataonesoftware.com/vin_decoder_api_free_trial ; FAQ: "You have not provided enough information (ie. business email address, legitimate business name, business website, full name)" | CONFIRMED |
| 2 | Request a quote | Founder | Name, email, company, "Tell Us About Your Needs" | Custom quote. Price depends on "Your intended use of the data ... Volume of VINs decoded per month ... Number of endpoints serviced ... Monthly unique website traffic" | UNVERIFIED | UNVERIFIED | https://offers.dataonesoftware.com/quote-pricing ; /faqs | CONFIRMED |
| 3 | Sign the data license | Founder | UNVERIFIED | License: "we do not 'sell' our data and products, but we license them" | UNVERIFIED | UNVERIFIED | /faqs | UNVERIFIED. The website terms are site terms, not the data license |

### b5. Vehicle Databases

| # | Action | Who | What you must provide | Output | Cost | Time | Evidence URL | Status |
|---|---|---|---|---|---|---|---|---|
| 1 | Sign up | Founder | First name, last name, email, password, CAPTCHA, email verification | Account. Trial path: "Your account is under review" | $0 | UNVERIFIED | https://vehicledatabases.com/portal/signup | CONFIRMED (code) |
| 2 | Buy a testing package | Founder | Card (Stripe) | Starter $50 one time, 200 credits. Premium $100, 450 credits. 1 call/s | $50-$100 | "Instant Access" | https://vehicledatabases.com/pricing.pdf p.3 | CONFIRMED |
| 3 | Buy a monthly plan | Founder | Card | Starter $100/mo (500 credits, $0.20/credit, overage $0.24) to Enterprise $2,500/mo (50,000 credits, $0.05/credit) | As left. Credits per call UNVERIFIED | Minutes | pricing.pdf p.4 | CONFIRMED |
| 4 | Ask for a written waiver of the storage ban | Founder to support@vehicledatabases.com, (800) 205-9337 | Use case | UNVERIFIED | UNVERIFIED | UNVERIFIED | https://vehicledatabases.com/terms-and-conditions | UNVERIFIED |

### b6. NHTSA vPIC

| # | Action | Who | What you must provide | Output | Cost | Time | Evidence URL | Status |
|---|---|---|---|---|---|---|---|---|
| 1 | Call the API. No key | Engineer | None | Decode. "max 50 VINs per batch" | $0 | Immediate | https://vpic.nhtsa.dot.gov/api/ | CONFIRMED |
| 2 | Download and host the standalone DB | Engineer | None | "vPICList_lite_2026_10", "limited to VIN Decoding functionality only" | $0 | Hours | https://vpic.nhtsa.dot.gov/Downloads | CONFIRMED |
| 3 | No agreement needed | n/a | n/a | "Information presented on this web site is considered public information and may be distributed or copied." | $0 | n/a | https://www.nhtsa.gov/about-nhtsa/terms-use (live 403. Wayback 2026-09-18) | CONFIRMED (archive copy) |

### b7. I-CAR (RTS calibration content)

| # | Action | Who | What you must provide | Output | Cost | Time | Evidence URL | Status |
|---|---|---|---|---|---|---|---|---|
| 1 | Do a trademark search on "Revv" before the first contact. I-CAR already lists "Revv" (Revv ADAS) | Founder or counsel | Nothing | Plan to tell the 2 companies apart | $0 (search) | 1 day | https://info.i-car.com/sustaining-partners/revv | INFERRED |
| 2 | Submit the Information Providers form | Founder | Name, Phone, E-mail (required), Company, City/State, reCAPTCHA | I-CAR contact | $0 | UNVERIFIED | https://info.i-car.com/contact-us/services-and-information-providers | CONFIRMED (path) |
| 3 | Call (847) 590-1198 or (800) 422-7872. Ask for Jeff Peevy, VP Industry Relations, about "licensing of I-CAR intellectual property" | Founder | 1-page use case: calibration triggers in estimates, link to RTS, no bulk export | Named owner of the request | $0 | UNVERIFIED | https://info.i-car.com/governance/leadership ; 2018 press release | INFERRED |
| 4 | Ask if a license needs a Sustaining Partner subscription. Ask for the fee | I-CAR | Company profile | Fee, tier | UNVERIFIED (not published) | UNVERIFIED | 2018-01-18 press release | UNVERIFIED |
| 5 | Negotiate a written license for RTS calibration content | I-CAR legal | Scope, display, cache, AI use, attribution | License. The I-CAR Academy curriculum license (Doc 831 Rev 3) shows I-CAR's style: 1-year auto-renew, termination "immediately without notice" on breach, delete all copies, inspection right, indemnity, Illinois law | UNVERIFIED | UNVERIFIED | https://info.i-car.com/getmedia/c996a361-2f5e-48d2-9209-6e91a8d4a341/i-car-academy-curriculum-licensing-agreement.pdf (PDF created 2025-11-19) | Template only |
| 6 | Clear OEM-quoted text with each OEM where I-CAR cannot sublicense | Founder, then OEMs | List of makes | OEM permission | UNVERIFIED | UNVERIFIED | RTS calibration page disclaimer | UNVERIFIED |

### b8. DEG (Database Enhancement Gateway)

| # | Action | Who | What you must provide | Output | Cost | Time | Evidence URL | Status |
|---|---|---|---|---|---|---|---|---|
| 1 | Contact DEG via the form, or email admin@degweb.org and call Danny Gredinberg (302) 423-0207 | Founder | Form: First, Last, Email (required), Phone, Company, "How Can We Help You?" (required), CAPTCHA | Route to the Joint Operating Committee (JOC) | $0 | UNVERIFIED. "only 1 full time administrator and several volunteers" | https://degweb.org/contact-us/ | CONFIRMED (path) |
| 2 | Copy aaron@scrs.com (SCRS) and info@autoserviceproviders.com (AASP). Ask if ASA must also approve | Founder | Written proposal: index inquiries, short quotes, link to each inquiry, no full mirror | Written permission letter | $0 | UNVERIFIED | about-deg; inquiry-process FAQ | INFERRED |
| 3 | Optional sponsorship. It gives logos only, no data rights | Founder | Application, JOC review | Listing | $250-$4,000/yr | UNVERIFIED | https://degweb.org/sponsorship-inquiry/ | CONFIRMED (not a license) |
| 4 | Ask MOTOR (via CCC), Mitchell and Audatex for their position on quoting hour values from DEG responses | Founder | Use case | Written no-objection or refusal | UNVERIFIED | UNVERIFIED | Audatex DBRM ownership quote | UNVERIFIED |

### b9. CAPA Part Search

| # | Action | Who | What you must provide | Output | Cost | Time | Evidence URL | Status |
|---|---|---|---|---|---|---|---|---|
| 1 | Write the use statement: 1 part per lookup by OEM or Partslink number, status shown with a link back | Founder | Use, volume, display, storage plan | Request text | $0 | Internal | CapaCopyrightGuidelines | INFERRED |
| 2 | Submit the contact form or call 1-800-505-2272 | Founder | Name, company, address 1, city, state, zip, country, email, message (all required). Optional: address 2, phone, fax, website. reCAPTCHA | Request logged | $0 | UNVERIFIED | https://www.capacertified.org/About/ContactUsForm | CONFIRMED |
| 3 | Case-by-case review | CAPA | Answers to questions | Decision | UNVERIFIED | UNVERIFIED | "All requests will be reviewed on a case-by-case basis." | CONFIRMED |
| 4 | Get written permission or a license | CAPA | Signature | Letter or license | UNVERIFIED | UNVERIFIED | "without prior written permission from CAPA is prohibited" | CONFIRMED (required) |
| Alt | Get the CAPA flag from part-supplier data feeds, as CCC and Mitchell do | Founder with suppliers (LKQ/Keystone and others) | Supplier data agreements | CAPA flag per part | Supplier terms | UNVERIFIED | RDN 2025-04-29 | CONFIRMED (precedent) |

### b10. Car-Part.com

| # | Action | Who | What you must provide | Output | Cost | Time | Evidence URL | Status |
|---|---|---|---|---|---|---|---|---|
| 1 | Shops use Car Part Pro themselves. Revv shows no Car-Part data | Shop | Email, password, security question and answer, reCAPTCHA | Login | $0 ("FREE to professional repairers") | Minutes | https://pro.car-part.com/pricing ; login.car-part.com/login/create | CONFIRMED |
| 2 | Call or email sales about an integration like the CCC and Audatex "Parts Portal Integration" | Founder | Company profile, estimate format (EMS), volume | Sales talk | UNVERIFIED | UNVERIFIED | https://products.car-part.com/sales.html ; https://pro.car-part.com/integration/ | INFERRED. No public program |
| 3 | Sign the Master Customer Agreement and integration terms | Both | Entity details (UNVERIFIED) | Contract | UNVERIFIED | UNVERIFIED | util.car-part.com/terms.html §2 | INFERRED |
| 4 | Send formal notices "by postal mail sent to Car-Part.com's headquarters" | Founder | Letter | Notice | Postage | Days | terms.html §14 | CONFIRMED |

### b11. California CDI labor rate survey API

| # | Action | Who | What you must provide | Output | Cost | Time | Evidence URL | Status |
|---|---|---|---|---|---|---|---|---|
| 1 | GET /api/v1/PublicRates | Engineer | Nothing. No key | JSON: orgs, years, uploads | $0 | Seconds | https://cdi-autobody-public-api.azurewebsites.net/api/v1/PublicRates | CONFIRMED |
| 2 | GET per-insurer cover letters and prevailing rate reports | Engineer | org id, year, version | Insurer files (base64) | $0 | Seconds | lrssearch.insurance.ca.gov main.9c2beb7ca0c3a90a.js | CONFIRMED (app code) |
| 3 | Store with source URL, date, version. Drop the user GUID. Do not store owner name, phone or email until counsel approves | Engineer | Nothing | Dataset | $0 | Internal | CDI "Ownership" clause; shop table fields OWNERNM, PHONENUMBER, EMAIL | INFERRED |
| 4 | Before you republish full insurer files, ask CDI and the insurer. Rates as facts carry less risk | Founder | Written request | Permission or no-objection | $0 | UNVERIFIED | "you must seek permission directly from the owning (or holding) sources" | CONFIRMED (CDI text) |

Statute: Ins. Code §758(c): insurers "shall report the results of that survey to the department, which shall make the information available upon request." (https://california.public.law/codes/insurance_code_section_758). App text: "is hereby made available to the public upon request".

### b12. Rhode Island DBR labor rate bulletins

| # | Action | Who | What you must provide | Output | Cost | Time | Evidence URL | Status |
|---|---|---|---|---|---|---|---|---|
| 1 | Download the results bulletin (October) and the survey bulletin (April/May) each year. dbr.ri.gov blocks bots (403). Use a browser | Analyst | Nothing | PDF | $0 | Minutes | Bulletin 2025-5, signed "October 24, 2025": https://dbr.ri.gov/sites/g/files/xkgbur696/files/2025-10/INS_Bulletin%202025-5%20Auto%20Body%20Labor%20Rate%20Survey%20Results.pdf . Bulletin 2026-2, "April 30, 2026": https://dbr.ri.gov/sites/g/files/xkgbur696/files/2026-04/ins-Bulletin%202026-2%20-%20Auto%20Body%20Labor%20Rate%20Survey%20effective%20May%202026.pdf (Wayback 2026-06-12) | CONFIRMED |
| 2 | Show rates with the credit "RI DBR Insurance Bulletin 2025-5" | Revv | Credit line | Display | $0 | n/a | https://www.ri.gov/policies/copyright/ : "considered public information and may be distributed or copied. However, use of appropriate byline/photo/image credits is requested." | CONFIRMED |
| 3 | Optional: APRA request for full insurer survey reports | Founder | Written request | Records or denial | UNVERIFIED (fee schedule not read) | UNVERIFIED (statute not read) | https://dbr.ri.gov/public-records-request ; DBR.DirOfficeInq@dbr.ri.gov (search snippet only) | INFERRED |

Bulletin 2026-2 sets the next filing: insurers "must email a report to dbr.specialreports@dbr.ri.gov no later than September 1, 2026." The 2026 results bulletin was not found on 2026-10-18. The 2025 one came out on October 24.

### b13. OEM1Stop

| # | Action | Who | What you must provide | Output | Cost | Time | Evidence URL | Status |
|---|---|---|---|---|---|---|---|---|
| 1 | Deep-link to OEM1Stop pages and PDFs. Do not store copies | Revv | Nothing | Links | $0 | Immediate | terms-use has no linking ban | CONFIRMED (allowed because the terms are silent) |
| 2 | To store, cache or extract, email admin@oem1stop.com | Founder | Which PDFs, refresh rate, display | Written permission from OEM Collision Repair Roundtable, Inc. | UNVERIFIED | UNVERIFIED | https://www.oem1stop.com/content/terms-use | CONFIRMED (path. The inbox is not named for permissions) |
| 3 | Get permission from each OEM for its own PDFs. GM PDFs are on gmparts.com | Founder, then OEMs | Same scope | OEM permission | UNVERIFIED | UNVERIFIED | https://www.oem1stop.com/position-statements | UNVERIFIED |
| 4 | Crawl at 1 request per 10 s or slower. Do not crawl /search/ | Engineer | Nothing | Compliance | $0 | n/a | https://www.oem1stop.com/robots.txt | CONFIRMED |

---

## (c) Requirements

### c1. What each program asks of the applicant

| Program | Entity | EIN | Insurance | Security | Card | Business verification | Agreement |
|---|---|---|---|---|---|---|---|
| MarketCheck | "real company affiliation (where applicable)". Company name required | Not asked | Not stated | Keys server-side only (AUP 3.4). Pen tests need written permission (AUP 5.2). Audit after breach, cost "not to exceed $25,000 per audit" (§14) | Yes, also Free (code) | Business email. No fake or temporary email (§1.2, AUP 4.2(f)) | Click-through ToS v2 + AUP + DPA. Enterprise written agreement for storage |
| VinAudit | Paid: "intended for commercial and internal business use" | Not asked | Not stated | Enterprise "Security & compliance review" | Self-Service yes. Trial UNVERIFIED | "Business Email" | Click-through. Written authorization for third-party use |
| CarAPI | None stated | Not asked | Not stated | Not stated | At purchase | None | Click-through |
| DataOne | Business name and website checked | UNVERIFIED | UNVERIFIED | UNVERIFIED | UNVERIFIED | Manual trial review | Data license (text not public) |
| Vehicle Databases | None stated | Not asked | Not stated | Not stated | At purchase | Trial "under review" | Click-through |
| NHTSA vPIC | None | None | None | None | None | None | None |
| I-CAR | Not stated | Not stated | Not stated. Academy template has indemnity | Not stated | Not on form | Not stated | Written permission or license |
| DEG | Not stated | Not stated | Not stated | Not stated | No | No | None exists |
| CAPA | Not stated | Not stated | Not stated | Not stated | n/a | Case-by-case review | Written permission |
| Car-Part | Not stated. Master Customer Agreement not public | UNVERIFIED | UNVERIFIED | UNVERIFIED | No (Pro sign-up) | "may accept or reject any such Registrations in its sole discretion" | Master Customer Agreement (inferred) |
| CDI API | None | None | None | None | None | None | None. Insurer files: owner permission |
| RI DBR | None | None | None | None | None | None | None. Credit requested |
| OEM1Stop | Not stated | Not stated | Not stated | Not stated | No | No | "prior written permission" to store |

### c2. Terms that matter for Revv

| Program | Store / cache | AI / ML | Display to end users | Resale | Attribution | Termination | Law |
|---|---|---|---|---|---|---|---|
| MarketCheck (portal v2) | Single request only. Billing, audit, support minimum allowed (§7.3). Enterprise may negotiate (§7.4) | Banned incl. "evaluate, validate, benchmark", RAG, vector DB (§5.1.2, §6.1). In-session use allowed if discarded (§6.1(f)) | Allowed: "display MarketCheck Data within your own applications to your own end users" (§3.2) | Banned (§5.1.1) | "On request ... 'Data powered by MarketCheck'" (§8.1) | "immediately and without notice" on breach. "promptly purge any remaining MarketCheck Data" (§9.1, §9.3). No assignment on merger or change of control without consent (§18.1) | Delaware |
| VinAudit | Default "no longer than thirty (30) days" | Banned incl. "validate" | Banned without written OK | Banned | Keep notices | "immediately, with or without notice" | Delaware |
| CarAPI | Allowed. Display of fetched data allowed after cancel | No clause | Allowed: "display of Content within your end-user-facing products" | Banned without written OK | None | "at any time, with or without cause or notice" | Virginia, AAA arbitration, Richmond |
| DataOne | UNVERIFIED | UNVERIFIED | UNVERIFIED | UNVERIFIED | UNVERIFIED | UNVERIFIED | Site terms: Virginia |
| Vehicle Databases | Banned: "cache or otherwise store any Vehicle Databases content" | No AI clause. Storage ban applies | "must be presented on the same 'as is' terms" | Banned | None | "at any time and for any reason without notice". "NO REFUNDS WILL BE ISSUED" | Canadian arbitration, North York, Ontario |
| NHTSA vPIC | Free | No limit | Allowed | Allowed | None. No endorsement | n/a | US federal |
| I-CAR | Banned without permission ("reproduced, downloaded, disseminated, published, or transferred") | No clause. Commercial ban covers it | Banned without permission | Banned | UNVERIFIED | Terms can change without notice | Illinois |
| DEG | No terms. Copyright "All Rights Reserved" | No terms | No terms | No terms | No terms | n/a | n/a |
| CAPA | Banned for commercial use without permission | No clause | Banned for commercial use without permission | Banned | UNVERIFIED | n/a | UNVERIFIED |
| Car-Part | Banned: "copy, collect, recreate ... or reformat" | No clause. The derived-data ban covers it | Only inside Car-Part products | Banned | n/a | Car-Part discretion | Kentucky |
| CDI | CDI content public domain. Insurer files: ask the owner | No clause | CDI content allowed | CDI content allowed | Not required | n/a | California |
| RI DBR | "may be distributed or copied" | No clause | Allowed | Allowed | "byline ... credits is requested" | n/a | Rhode Island |
| OEM1Stop | Banned without written permission | No clause | Linking allowed by silence | Banned | n/a | n/a | UNVERIFIED |

---

## (d) Blockers (with quotes)

| # | Program | Blocker | Exact quote and source |
|---|---|---|---|
| 1 | MarketCheck | No stored decodes on saved estimates without Enterprise | "You will not build an offline copy, mirror, derivative database, snapshot, training corpus, or historical archive of MarketCheck Data." (ToS v2 §5.1.4). "caching of API responses beyond what is strictly necessary to render a single end-user request is prohibited. You will not maintain a persistent cache, a TTL-extended cache, a CDN cache, a database mirror" (§7.1) |
| 2 | MarketCheck | AI use limited to a single session. Logs can count as persistence | "Build, train, fine-tune, evaluate, validate, benchmark, augment, distill, or otherwise improve any machine-learning model ... retrieval system, vector database ... without prior written permission" (§5.1.2). "provided that you do not persist the response, the context window, or the conversation history" (§6.1(f)) |
| 3 | MarketCheck | Free plan is not for production | "You may not use the free tier as a production data source." (AUP §2.3) |
| 4 | MarketCheck | 2 conflicting sets of terms | Marketing ToS (2026-03-24, New York) and portal ToS v2 (effective 2026-09-14, Delaware). v2 §18.5 calls the portal terms "the entire agreement". Which binds: UNVERIFIED |
| 5 | MarketCheck | Change of control needs consent | "You may not assign ... whether by operation of law, merger, change of control ... without MarketCheck's prior written consent" (§18.1). This matters at an acquisition |
| 6 | VinAudit | No third-party display | "use the Services or VinAudit data for the benefit of any third party except as expressly authorized by VinAudit in writing". Bans "service bureau, hosted pass-through, white-label, proxy, marketplace, public search tool, or other third-party access model" (https://data.vinaudit.com/terms) |
| 7 | Vehicle Databases | No storage | "cache or otherwise store any Vehicle Databases content including but not limited to Vehicle Databases data" (https://vehicledatabases.com/terms-and-conditions) |
| 8 | CarAPI, vPIC | No OEM paint code | CarAPI: "color name and RGB values". vPIC: no color variable in 145 |
| 9 | I-CAR | Commercial use needs permission | "You agree not to display or use any I-CAR Content in any manner, or for any commercial purpose, without permission from I-CAR." (terms PDF) |
| 10 | I-CAR | OEM text inside RTS | "Information displayed in quotes ("") are direct quotes from the OEM-specific/vehicle-specific information" (RTS calibration page). I-CAR permission may not cover OEM text |
| 11 | I-CAR | Name clash with Revv ADAS | https://info.i-car.com/sustaining-partners/revv redirects to https://www.revvhq.com/ . Revv ADAS: "Identify required ADAS calibrations and OEM procedures during the first estimate" |
| 12 | DEG | DEG cannot grant rights in IP text | "All labor times included in Audatex products are the property and proprietary information of Audatex." (Audatex DBRM 2025). DEG has no terms and no rights grant |
| 13 | DEG | Low capacity | "only 1 full time administrator and several volunteers" (sponsorship page). Submit page: "We are currently upgrading our systems." |
| 14 | CAPA | Commercial use banned without permission | "Use, copying, downloading, and/or redistribution in any manner for commercial or other non-allowable use without prior written permission from CAPA is prohibited." |
| 15 | Car-Part | No use outside Car-Part products | "You are not permitted to use Car-Part's Automotive Intelligence except as it is integrated, and intended for use, within Car-Part products and services." (copy page, 2025-05-30) |
| 16 | Car-Part | No building similar software from its docs | Docs may not be used "to create or modify software or services that perform the same or similar function(s)" (util.car-part.com/terms.html) |
| 17 | CDI | Insurer-made files need owner permission | "In order to use any information on this Website not owned or created by CDI you must seek permission directly from the owning (or holding) sources." |
| 18 | CDI | Possible personal data | Shop table fields: "Business Name, Address, City, County, Zip, Owner Name, Phone Number, Email". The 2 sample calls returned `ShopAndRateList: null`. Populated data UNVERIFIED |
| 19 | RI DBR | No warranty on copyright, and bots blocked | "the State of Rhode Island makes no warranty that materials contained herein are free of copyright claims" (ri.gov copyright). dbr.ri.gov returns 403 to scripts |
| 20 | OEM1Stop | No storage without permission | "may not ... be reproduced, transferred, distributed or stored without prior written permission" |

---

## (e) Unknowns: exact question and exact contact

| # | Program | Exact question | Exact contact |
|---|---|---|---|
| 1 | MarketCheck | "Which terms bind a developers.marketcheck.com customer: Portal ToS v2 (effective Sep 14, 2026, Delaware) or marketcheck.com/terms_of_service (Mar 24, 2026, New York)?" | legal@marketcheck.com |
| 2 | MarketCheck | "We are a collision-estimating SaaS. Shop users decode a VIN on an estimate. The estimate is kept for months as an insurance record. Can we keep the decoded trim, options and paint code on that estimate? If not, what Enterprise terms and price allow it under §7.4?" | api@marketcheck.com, cc info@marketcheck.com |
| 3 | MarketCheck | "Does §6.1(f) allow a NeoVIN decode in a hosted LLM session if we keep standard application logs for 30 days? Do logs count as persisting the 'context window'?" | api@marketcheck.com |
| 4 | MarketCheck | "Is the NeoVIN Enhanced Decoder callable on the Free plan at $0 within the 500 calls?" | support@marketcheck.com |
| 5 | MarketCheck | "What is the early-billing threshold for Basic and for Standard: $250, $500 or $1,000?" | support@marketcheck.com |
| 6 | MarketCheck | "What percent of NeoVIN decodes for MY 2018-2026 return a non-empty exterior_color.code, by make?" | support@marketcheck.com |
| 7 | VinAudit | "Can Self-Service show decodes to our SaaS customers (body shops)? If not, what Enterprise terms allow third-party display, retention over 30 days, and an OEM paint code?" | https://data.vinaudit.com/schedule-meeting . Legal notices: VinAudit.com Inc., 218 Main St #688, Kirkland, WA 98033 |
| 8 | VinAudit | "Does the Trial need a card? What are the Self-Service eligibility criteria?" The FAQ says the criteria are in the terms. I found none there | Same as #7 |
| 9 | CarAPI | "Which plan includes the VIN Decode API: all plans (cards) or Premium only (table)?" | https://carapi.app/contact |
| 10 | DataOne | "Send the data license agreement. What are the storage, display, AI and resale terms for a collision-estimating SaaS? Does build data include the OEM paint code? What are the minimum term and price?" | https://offers.dataonesoftware.com/quote-pricing ; 877-438-8467 ; support@dataonesoftware.com |
| 11 | Vehicle Databases | "How many credits does 1 VIN decode use? Can a written agreement waive the 'cache or otherwise store' ban for estimate records?" | support@vehicledatabases.com ; (800) 205-9337 |
| 12 | vPIC | "What are the numeric vPIC API rate limits?" | manufacturerinfo@dot.gov ; 1-888-399-3277 |
| 13 | I-CAR | "Does I-CAR license RTS OEM Calibration Requirements content to a software company for display inside estimates? Is a Sustaining Partner subscription required? What is the annual fee?" | Information Providers form ; (847) 590-1198, ask for Jeff Peevy, VP Industry Relations |
| 14 | I-CAR | "Can I-CAR grant rights to the OEM-quoted text in RTS, or must we clear each OEM? Which OEMs restrict it?" | Same as #13 |
| 15 | I-CAR | "Does a license allow caching, storage, AI use and end-user display? What attribution and termination terms apply?" | Same as #13, cc privacyservices@i-car.com |
| 16 | I-CAR | "On what terms did Audatex get 'permission to reproduce' I-CAR materials? Do CCC or Mitchell hold similar permissions?" | Same as #13 |
| 17 | I-CAR | "Is the RTS calibration search free to the public today, or limited to Gold Class, Platinum and Sustaining Partners?" | (800) 422-7872 |
| 18 | DEG | "Who can grant written permission to index DEG inquiries and quote short parts with links: DEG, the JOC, or AASP, ASA and SCRS together? Who owns submitted inquiry text?" | admin@degweb.org ; aaron@scrs.com ; info@autoserviceproviders.com ; (302) 423-0207 |
| 19 | DEG / IPs | "Do you object to a third party quoting DEG response text that contains your labor times, with a link to DEG?" | MOTOR: accountservices@motor.com. Audatex: AXUS.AASupportContact@audatex.com (support, not licensing). Mitchell: https://www.mitchell.com/support/ (no licensing contact published) |
| 20 | CAPA | "May Revv, a collision estimating software company, look up 1 part at a time inside customer estimates, show CAPA status with a link to capacertified.org, and cache results for 30 days? What fee, agreement and review time apply? Do you offer a data feed?" | https://www.capacertified.org/About/ContactUsForm ; 1-800-505-2272 |
| 21 | CAPA | "Does CAPA license certification data to parts suppliers or estimating systems? Can Revv get the same feed?" | Same as #20 |
| 22 | Car-Part | "Do you offer an integration like the CCC/Audatex 'Parts Portal Integration' to a new estimating or supplement platform? What agreement, fees and technical spec apply? Can Revv show iPro results, or must the shop leave Revv?" | Sales@Car-Part.com ; (859) 344-1925 |
| 23 | Car-Part | "Which terms cover the public car-part.com search? Please send them." | Same as #22 |
| 24 | CDI | "Can a private company republish in full the insurer labor rate survey files published under Ins. Code §758(c)? Is the shop owner name, phone and email meant for public reuse? Are there rate limits or terms for cdi-autobody-public-api.azurewebsites.net?" | https://cdiapps.insurance.ca.gov/contactus/default.aspx ; CDIPrivacyOffice@insurance.ca.gov |
| 25 | CDI | "Which effective date applies to the 'Ownership' clause on insurance.ca.gov/privacy-policy?" | Same as #24 |
| 26 | RI DBR | "Are the full insurer survey reports filed under 230-RICR-20-05-10 public records under APRA? Does DBR have a reuse policy beyond ri.gov/policies/copyright? When will the 2026 results bulletin come out?" | dbr.specialreports@dbr.ri.gov ; DBR APRA portal https://dbr.ri.gov/public-records-request |
| 27 | OEM1Stop | "May Revv store and display OEM1Stop-hosted position statement PDFs with attribution? Does Roundtable permission cover OEM-authored PDFs, or must each OEM approve?" | admin@oem1stop.com |
| 28 | Counsel | "Does the CCPA 'publicly available' exclusion cover a vendor that stores CDI shop-level personal data?" "Is 'Revv' clear to use given Revv ADAS (revvhq.com)?" | Revv outside counsel |

## Items still not checked

- CarAPI full terms of use: the AI clause was searched and none was found. No other gap.
- DataOne data license text: not public.
- Mitchell and CCC licensing contacts for DEG reuse: none published.
- I-CAR CEO change (RDN 2025-04-14 headline only): UNVERIFIED.
- RI APRA response time and fee: statute not read.