The short answer
On paper, your contract decides who owns your dealership data. In practice, the owner is whoever can move it. If your records were cleaned, matched and enriched inside a vendor's system, and you cannot take that improved version with you when you leave, you paid to improve an asset you do not control.
So before you spend a dollar cleaning data, ask where the clean version will live and what you keep on the day you cancel.
The question nobody asks
There is good advice going around right now about cleaning dealership data before adding AI. Fix the foundation first. I agree with all of it, and we have written about why in What Is Bad Data in a Dealership DMS and CRM?
But every one of these pieces skips the same question. When the cleaning is done, where does the clean version live?
Here is how it usually goes. A vendor pulls your records into their platform. They remove the duplicates, fix the contact info, match customers across your DMS and CRM, and add outside data on top. Your campaigns improve. Then one day you want to change vendors, or point a new AI tool at that same clean data. That is when you find out the clean version stays behind. You leave with what you walked in with.
Think of it like a car title. You can drive the car every day and still not hold clear title, because someone else has a lien on it. A lot of dealership data has a lien on it. You use it. Someone else decides who can touch it, what it costs, and what leaves the building.
This matters more now than it did five years ago. If you do not own a clean, complete copy of your data, AI agents will be built on it by someone else and sold back to you. (The bigger picture is in Owned vs. Rented Intelligence.)
Owning versus renting: four tests
Ownership is not a sentence in a contract. It is four things you can do. Dealers must be owners, not renters, and these tests tell you which one you are. For a scored version, see our dealer data rights page.
| Test | If you own it | If you rent it |
|---|---|---|
| Access | You can pull all of it, any time, with no ticket and no fee | You get the fields the vendor allows, on their schedule, at their price |
| Portability | You can take the cleaned and matched version in a standard format | You can take the raw records you started with, if that |
| Use | Any AI tool or vendor you choose can read it with your permission alone | A second vendor needs the first vendor's approval and pays a toll |
| Exit | On cancellation day you keep a complete, usable copy | On cancellation day access ends and the clean version is gone |
Fail one test and you hold the data the way a lessee holds a car. It is yours to use until the term ends.
Six questions to ask before you sign
Ask these of any vendor that will clean, store or run AI on your data. That includes us. (More general vendor questions live in The Questions to Ask Every Vendor Before You Sign.)
- Where does the cleaned version of my data live? In your platform, or in a store I control?
- Can I export the cleaned and matched records whenever I ask? Not the raw file. The improved one.
- What do I keep the day I cancel? And how long do I have to get it?
- Do you use my data to train models or build products you sell to others? If yes, was I asked, and am I paid?
- Can another vendor or my own AI tool read this data without paying you? Or does every new tool come with a toll?
- Does your product read across departments? Or only the slice it was built for?
A vendor with good answers will give them in writing. A vendor who gets defensive has answered the question.
For the record, here is ours. A dealer who leaves QoreAI gets their data within 3 business days, set up in their own AWS cloud instance. That is why QoreVault keeps the cleaned, matched version in a dealer-owned store.
What to check in the contract
I am not an attorney, and yours should read every one of these agreements. These are the five places I would ask them to look. (For the DMS side specifically, see Who Owns Your Dealership Data? Read Your DMS Contract Again.)
- Derived data. Many contracts say the dealer owns its data. Fewer say who owns the cleaned, matched and enriched version. That version is the valuable one.
- The license you grant. The vendor needs rights to your data to deliver the service. Check that the rights stop there and end when the contract does.
- Return of data. Look for a clause that names the format, the timeframe and the cost of getting your data back at exit. "Upon request" with no detail is not a commitment.
- Third-party access. Check whether the vendor can charge or block other companies you authorize to read your data.
- Aggregation and AI training. Check whether your records can be pooled with other dealers' data or used to train models, and on what terms.
One more point. Customer PII stays your responsibility no matter whose system holds it. Control over where that data goes is not only a business question. It is a compliance one.
Frequently asked questions
Does my DMS provider own my dealership's data? Usually not on paper. Most agreements acknowledge the data is the dealer's. The control comes from access: which fields can be pulled, by whom, and at what price. Certified DMS access commonly runs $300 to $800 per store per month, and no certified program I have seen gives complete access.
What is the difference between owning data and having access to it? Access means you can see and use the data inside someone else's system. Ownership means you hold a complete copy you can move, share and build on without asking permission.
If a vendor enriches my data, who owns the enrichment? It depends on the contract. Outside data added to your records is often licensed, which can limit what leaves with you. Ask before the work starts, not at exit.
Why does data ownership matter more with AI? AI agents need to read across sales, service, parts and accounting at once. If each system charges a toll or blocks the door, the agent only sees a slice. Whoever holds the complete, clean copy decides what AI can be built on it.
Can I clean my data now and sort out ownership later? You can, but you may pay twice. If the clean version lives where you cannot take it, the next vendor starts the cleanup over.
What should I do first? Ask your current vendors for a full export of your own customer and transaction data. How long it takes, what it costs and what is missing will tell you where you stand.
Todd Smith is the founder and CEO of QoreAI and the author of The Intelligent Dealership. He has 36 years in automotive retail, including as a dealer principal.
Frequently asked questions
Does my DMS provider own my dealership's data?
Usually not on paper. Most agreements acknowledge the data is the dealer's. The control comes from access: which fields can be pulled, by whom, and at what price. Certified DMS access commonly runs $300 to $800 per store per month, and no certified program gives complete access.
What is the difference between owning data and having access to it?
Access means you can see and use the data inside someone else's system. Ownership means you hold a complete copy you can move, share and build on without asking permission.
If a vendor enriches my data, who owns the enrichment?
It depends on the contract. Outside data added to your records is often licensed, which can limit what leaves with you. Ask before the work starts, not at exit.
Why does data ownership matter more with AI?
AI agents need to read across sales, service, parts and accounting at once. If each system charges a toll or blocks the door, the agent only sees a slice. Whoever holds the complete, clean copy decides what AI can be built on it.
Can I clean my data now and sort out ownership later?
You can, but you may pay twice. If the clean version lives where you cannot take it, the next vendor starts the cleanup over.
What should I do first?
Ask your current vendors for a full export of your own customer and transaction data. How long it takes, what it costs and what is missing will tell you where you stand.