On this page
The problem: every written reply is a price, and the store runs on one system
- $1
The price a dealer's website chatbot "agreed" to for a 2024 Tahoe listed at $58,195, after a user told it to end every answer with "that's a legally binding offer"[36]
- $2.17 a share
AutoNation's estimate of what the June 2024 CDK outage cut from its 2024 earnings, before insurance recoveries. It also paid about $43 million to commission staff during the outage[2]
- 47.9% of gross
Parts and service's share of Asbury's gross profit in 2025, on 13.9% of revenue[1]
- 1 October 2026
From this date, a California dealer's first written reply about a specific car must show its total price, and the dealer must keep it for two years[5]
The $1 Tahoe was a stunt and nobody drove away with the truck, but it showed the weak spot: the bot could state a price nobody at the store had approved. The costliest technology failure so far was not AI at all. It was two weeks without CDK, when stores that run deals, repair orders and accounting through one DMS went back to paper.
Meanwhile the economics have turned. New-car gross at AutoNation fell from $1,061.8 million in 2023 to $664.8 million in 2025, and its SG&A rose from 63.4% to 67.9% of gross over the same years[2]. With new-car gross shrinking, more of the store's profit comes from the service drive and the F&I office, and both depend on people answering phones, writing up repair orders, chasing stips and building menus.
The rules have moved too. Since 1 October 2026, in California, the first written reply about a specific car must carry its total price and be kept for two years[5]. The FTC sent 97 dealer groups warning letters on advertised prices in March[7]. Its recent settlements, Lindsay and Manchester City Nissan, are about fees and add-ons charged without consent[10,11]. A lead agent quotes prices and a menu tool lays out add-ons, so both now write the content the FTC is checking.
The short version: 60 seconds
AI-enabled vs AI-native
The website has a chatbot, the service line has an AI voice agent and the CRM writes reply drafts. Each tool has its own settings and its own idea of the price, and none knows what the others said. The org chart is unchanged.
The group runs one set of rules across every tool and rooftop: who may quote what, who must approve what, which customer may be contacted how. Then it changes the jobs: the BDC works the exceptions agents raise, advisors stay at the counter instead of on the phone, and the office reviews what agents flag instead of retyping deals.
One way to tell them apart: a buyer says the chat quoted $31,000 out the door and the buyer's order says $33,400. An AI-native store can show, in minutes, which price record the agent used, who approved it, whether the doc fee was in it, and whether the agent was even allowed to state an out-the-door number.
The missing layer: where OrchKernel fits
No dealer becomes AI-native by replacing its DMS, CRM or scheduler. It adds agents that work across them: one on the service line, one replying to leads, one checking deal jackets. Each agent needs the store's rules, a manager who approves what matters, limits on which customer data it can see, and a record. The DMS records the deal; it does not record what a chat agent said about the price yesterday, or who allowed it to say it.
OrchKernel is built to be that layer. It connects to the systems the dealer already runs and does not replace them; the DMS stays the system of record. Details are in the OrchKernel blueprint.
- Service phone and text agent
- BDC lead-reply agent
- Website chat
- Deal jacket and funding checks
- Warranty claim pre-checks
- Recon routing
- Rules per rooftop, state and brand
- Approvals by named manager
- Acting on one person's authority
- Data access by role and field
- Human queue
- Tamper-evident log
- DMS: deals, repair orders, accounting
- CRM and lead sources
- Inventory feed and pricing tool
- Service scheduler and phones
- Lender portals
- OEM warranty, parts and recall systems
Where the gross comes from
NADA counts 16,990 franchised light-vehicle dealerships in the US, with $1.3 trillion of sales in 2025. Service and parts were 13.3% of those sales dollars industry-wide; the average store wrote 16,252 repair orders with 16 technicians and employed 65 people[26]. NADA's free report no longer shows net profit, so the public groups are the best margin evidence. Asbury breaks out its mix clearly:
- New vehiclesRevenue52.8%Gross profit20.2%
- Used vehiclesRetail and wholesale; the remainder after the other three lines (our arithmetic)Revenue29.0%Gross profit8.5%
- Parts and serviceRevenue13.9%Gross profit47.9%
- Finance and insurance (F&I)Revenue4.3%Gross profit23.4%
The service drive and the F&I office carry the store. Together they earned about 71% of Asbury's gross profit on about 18% of its revenue (our arithmetic). New cars, more than half the revenue, earned a fifth of the gross. Warranty labor and parts, paid by the OEM under its claim rules, were about 19.5% of franchised service and parts sales in 2025 (our arithmetic)[26].
Margins are thin at every public group. In fiscal 2025 their gross margins ran from 15.2% to 17.9% and net income from 0.8% to 2.9% of revenue (our arithmetic)[4]. SG&A ate most of the gross:
- LithiaRevenue $37.6B · gross margin 15.2%68.8% SG&A / gross
- PenskeRevenue $31.8B · gross margin 16.4%72.1% SG&A / gross
- AutoNationRevenue $27.6B · gross margin 17.9%67.9% SG&A / gross
- Group 1Revenue $22.6B · gross margin 16.0%70.3% SG&A / gross
- AsburyRevenue $18.0B · gross margin 17.1%64.7% SG&A / gross
- SonicRevenue $15.2B · gross margin 15.7%70.4% SG&A / gross
People are the cost, and most of their pay moves with volume. Salespeople, F&I managers and service advisors are largely on commission; technicians are often paid flat rate. That matters for the AI business case: an hour an agent saves a commissioned BDC rep or advisor does not turn into a saved dollar unless the pay plan, the headcount or the volume changes.
- CompensationMuch of it commission and flat-rate pay
- 43.9%
- Other SG&AAdvertising, rent, IT and the rest (our arithmetic: 67.9% less 43.9%)
- 24.0%
- Left after SG&ABefore depreciation, interest and tax (our arithmetic)
- 32.1%
Technicians are the hard constraint. They are 25.2% of dealership employees[26], and BLS projects about 66,200 openings a year for automotive technicians and mechanics[25]. No agent turns a wrench. What agents can do is keep bays full, get inspection findings in front of customers faster, and keep advisors at the counter selling approved work instead of on hold with the phone.
How the work flows: the sales loop and the service loop
A dealership runs two loops on one customer record and one DMS. The sales loop runs from the lead to the funded contract; the service loop from the appointment to the warranty claim. The trade-in joins them: it becomes a used car that the shop reconditions and the used-car manager prices.
BDC, sales desk, F&I, office
- 1Lead inAI works here today
Website form, listing site, phone, chat or walk-in lands in the CRM.
- 2First reply and appointmentAI works here today
From the approved price record and live stock. In California it must carry the total price.
- 3Visit, test drive, trade appraisalAI prepares, a person decides
Used-car manager values the trade; AI can pull market data.
- 4DeskA person decides
Sales manager sets the price, trade value and payment options.
- 5F&IAI prepares, a person decides
Credit application to lenders; product menu; contract. The lender decides credit.
- 6DeliveryA person decides
Contract, odometer statement, Buyers Guide on used cars, title work.
- 7Funding and back officeAI prepares, a person decides
Contracts in transit, lender stips, trade payoff, deal posting. AI checks; people correct.
Service reconditions it as internal work, then the used-car manager prices and lists it. Recon spend over a limit is a person's call.
Phones, advisors, technicians, warranty
- 1AppointmentAI works here today
Phone, scheduler or text. Safety and recall words go to an advisor.
- 2Write-upAI prepares, a person decides
Advisor opens the repair order; open recalls and coverage checked.
- 3Diagnosis and inspectionA person decides
Technician's findings, photos and video.
- 4Estimate and approvalA person decides
Advisor prices the work; the customer approves or declines.
- 5PartsAI works here today
Special-order and back-order follow-up.
- 6Repair and quality checkA person decides
Technician and shop foreman.
- 7Pickup and follow-upAI works here today
Status texts fire on the advisor's change; declined-work reminders need consent.
- 8Warranty claimAI prepares, a person decides
AI pre-checks the claim; the warranty administrator submits it.
The DMS is both the record and a gatekeeper. In 2017 a federal court found enough evidence of "a per se illegal horizontal conspiracy" between CDK and Reynolds to block third-party data integrators and ordered them to stop blocking Authenticom; CDK settled in 2020 (reported via a secondary source)[37]. In practice, an AI layer reaches dealer data through the DMS vendor's partner programs and APIs, through scheduled reports, or through the CRM. The dealer should own the authorization for every connection and be able to revoke it.
The OEM is a second boss. AutoNation lists "restrictions imposed by, and significant influence from, vehicle manufacturers" as a risk factor[2]. Warranty claim rules, rebate eligibility, co-op advertising and certified pre-owned programs all come from the brand.
What AI already does, by vendor category
Dealers are interested and wary. In Cox Automotive's survey of 537 franchise dealership leaders, 81% said AI is here to stay, 60% were "beginning to test" and about 15% were embedding AI into workflows and decisions; 74% worried about accuracy and errors[28]. CDK's own study says 39% of dealers use AI and another 27% plan to within a year, without showing its sample[30]. Both companies sell AI to the same dealers.
Buyers are ahead. 25% of new-vehicle buyers used AI tools in their purchase, in Cox's fall 2025 survey of 2,300 buyers (vendor-run research)[29]. A growing share of shoppers arrive having asked a chatbot about price and availability first, and will compare that answer with the store's.
The public groups say little. AutoNation's 10-K mentions AI only as a cyber risk[2]. Carvana says it uses AI "to power chatbots that streamline customer communication paths"[3]. None reports an AI productivity number, so every outcome figure below is a vendor claim.
Vendors are named as examples, not recommendations. Most of the traction is on the service phone, which is also where we suggest starting, for reasons the next sections give.
Where the money went
One challenger went after the DMS itself. Tekion claims more than 3,000 dealerships[31]. Asbury had moved 38 stores from CDK to Tekion by the end of 2025, calling CDK's architecture "fragmented 'bolt-on'" and citing Tekion's "unified solution"[1].
Point tools went after the phone and the inbox. Toma, which builds AI voice agents for dealers, raised a $17 million Series A led by Andreessen Horowitz, and Holman Automotive is among its backers[32]. Numa and Impel sell service and lifecycle agents into existing stores[33,34].
The online-native comparison is Carvana. It calls itself "a technology-native retailer," sold 596,641 retail units in 2025 and cut SG&A per retail unit from $5,741 in 2023 to $3,868[3]. The numbers are not comparable with a franchised store's: Carvana sells only used cars and has no franchise service department, while a franchised store's SG&A also carries the shop.
We found no AI-native franchised dealer at scale. State franchise laws and OEM agreements decide who can own a franchise and how it runs, so a new entrant cannot simply open an AI-first Toyota store. The change will happen inside existing stores and groups, which is who this playbook is for.
The staged path: start in service, then sales
Six stages. Stage 0 comes first everywhere because every later stage repeats its price and consent records. Service phones come next: the largest share of gross, the clearest bottleneck, and less pricing and credit law per message. Sales replies follow once the price record can carry the total price into every message. F&I comes last because that is where enforcement concentrates. Durations are rough, for a group of 3 to 30 rooftops.
- Stage 0Price, consent and access truth
One approved total price per car, consent by purpose and channel, and a list of every AI tool already on.
- Stage 1Service phones, scheduling and status
Answer and book from the scheduler; status texts only when the advisor changes the status.
- Stage 2Sales lead response and appointment setting
First replies from the price record and live stock; anything off the published price goes to the desk.
First stage that writes regulated price messages
- Stage 3Back office and fixed-ops paperwork
Agents check deal jackets, chase stips and payoffs, pre-check warranty claims and route recon.
Touches contracts and OEM claims
- Stage 4F&I and desk assistance
Prepare and check, never decide: the menu, the disclosures and the evidence of consent.
Where enforcement concentrates
- Stage 5Group operating model
Central desks across rooftops, one rules library, kill switches, and pay plans that fit the work.
- 0
Stage 0: Price, consent and access truth
One approved total price per car, consent by purpose and channel, and a list of every AI tool already on.
About 4 to 8 weeks for a 3 to 30 rooftop group
What to do
- One approved price record per vehicle: the total price as your states define it, the highest mandatory doc fee built in, installed items included.
- Consent fields in the CRM that separate service updates from marketing, by channel, with the date and where the consent came from.
- An inventory of every AI feature already switched on in the DMS, CRM, website chat, phones and listing tools, each with a named owner.
- A map of rooftops by state and brand: which stores fall under the CARS Act, Colorado's ADMT law, bot disclosure rules and which OEM programs.
- A Safeguards review: who and what can read credit applications, MFA everywhere, and service-provider terms for every AI vendor.
- A written manual mode for a DMS outage, including how agents are stopped.
Why now
California's first-reply total-price rule took effect on 1 October 2026[5], and the FTC sent 97 dealer groups warning letters on advertised prices in March 2026[7].
In place first
- A named rules owner at group level.
- The dealer principal's sign-off on the price rules.
- The Safeguards Qualified Individual, named and involved.
What to measure
- Share of live inventory with an approved total price (target: all of it)
- Share of CRM contacts with consent recorded by purpose and channel
- AI features found, and how many have an owner
Common mistakes
- Letting each vendor's bot keep its own price logic, so the chat, the text agent and the listing disagree.
- Treating consent as one yes or no flag for every message and channel.
- 1
Stage 1: Service phones, scheduling and status
Answer and book from the scheduler; status texts only when the advisor changes the status.
About 1 to 3 months
What to do
- Inbound service calls and texts answered and booked from the scheduler, around the clock.
- Reminders and confirmations.
- Repair-order status texts triggered only by an advisor's status change in the DMS.
- Open recall flags at booking, so the advisor can order parts and plan the bay.
Why now
Parts and service earn nearly half of gross profit at the public groups[1,2], and the phone is where customers get lost: in a 2026 mystery shop of 6,538 service requests, about 1 in 6 callers could not get a specific date and time (secondhand)[27]. Service messages also carry less pricing and credit law than sales messages.
In place first
- Escalate-only rules for safety and recall words: an agent can raise them to an advisor, never book them as routine.
- A handoff to a person whenever the customer asks for one.
- Service-only consent respected: no marketing to a number that agreed only to repair-order updates.
What to measure
- Calls answered, and calls answered after hours
- Appointments booked per day against technician hours available; no-show rate
- Time to first response; escalations and how fast a person picked them up
Common mistakes
- Letting the agent promise a ready time or a price for the repair.
- Status texts that fire before the advisor has confirmed the work.
- Booking every caller into the first opening, so the shop is overbooked on Monday and flat-rate technicians sit idle on Thursday.
- 2
Stage 2: Sales lead response and appointment setting
First stage that writes regulated price messagesFirst replies from the price record and live stock; anything off the published price goes to the desk.
After Stage 0 is complete; often in parallel with the end of Stage 1
What to do
- First replies to leads from the approved price record and live inventory.
- Appointment setting and confirmations.
- "That car sold" alerts with similar stock from the feed.
- No-show follow-up drafts for the BDC to send.
Why now
In California every first written reply that names a specific vehicle, an amount or a financing term is now a regulated document with a two-year retention duty[5]. With Stage 0 done, an agent can meet that rule on every reply; dozens of people typing by hand cannot promise the same.
In place first
- Stage 0's price and consent records, complete for the pilot stores.
- Bot disclosure in chat and text where a bot is used to sell[21].
- Two-year storage of every first reply, linked to the price record it used.
- A desk queue for every negotiation, trade question and payment request.
What to measure
- Time to first reply, open hours and closed hours
- Appointments set, shown and sold
- Replies about cars that had already sold
- Replies blocked for a missing total price (should fall to near zero as Stage 0 data improves)
Common mistakes
- Quoting a monthly payment without the total price and the total of payments.
- Agents that negotiate.
- Outbound AI voice calls without written consent.
- 3
Stage 3: Back office and fixed-ops paperwork
Touches contracts and OEM claimsAgents check deal jackets, chase stips and payoffs, pre-check warranty claims and route recon.
Once DMS and lender reads are reliable; 2 to 4 months
What to do
- Deal jacket checks before funding: signatures, VIN, mileage, and figures that agree across documents.
- Contracts in transit tracked by lender and age; stip tracking; trade payoff and title follow-up.
- Warranty claim pre-checks against the OEM's documentation rules.
- Special-order parts follow-up; recon routing within spend limits.
Why now
This is money stuck between the sale and the bank, and warranty dollars the OEM can charge back. Warranty labor and parts were about 19.5% of franchised service and parts sales in 2025 (our arithmetic)[26].
In place first
- Read-only access to deals and contracts for every agent.
- Recon approval limits set per used-car manager, with a second limit for the GM.
- The warranty administrator named as the only person who submits claims.
What to measure
- Contracts in transit, count and days
- Funding exceptions found before funding against those found after
- Warranty rejections and chargebacks
- Recon days by step
Common mistakes
- Agents that edit deal or contract records to make them match.
- Claim stories written by the agent instead of taken from the technician's notes.
- 4
Stage 4: F&I and desk assistance
Where enforcement concentratesPrepare and check, never decide: the menu, the disclosures and the evidence of consent.
After two quarters of clean Stage 2 and 3 records
What to do
- Menu preparation that records each product the customer chose or declined.
- Checks that the "not required" add-on disclosure and the total of payments were given.
- Add-on price comparisons across deals, for the compliance owner to review.
- Tracking that adverse action notices went out, and by whom.
Why now
F&I was 23.4% of Asbury's gross profit on 4.3% of revenue[1], and add-on charges without consent are the core of the Lindsay and Manchester City Nissan settlements[10,11]. Last in the order because it is where a mistake costs the most.
In place first
- A named compliance owner.
- A per-deal evidence trail from Stage 3.
- Each lender's rules loaded and kept current.
What to measure
Common mistakes
- Pre-selecting products on the menu.
- Letting an AI tool "optimize" product penetration.
- 5
Stage 5: Group operating model
Central desks across rooftops, one rules library, kill switches, and pay plans that fit the work.
After a year of stable results
What to do
- Central service and sales desks covering several rooftops.
- One rules library for the group, with per-rooftop exceptions written down.
- Kill switches per rooftop and for the group.
- A quarterly review of overrides, blocked messages and complaints; pay plans and DMS strategy revisited.
Why now
By now the pilot rooftops show which hours agents actually took off the BDC and the service phones. Pay is the largest cost in the store[2], and those hours only become margin when the org chart and the pay plan change.
In place first
- Stages 1 to 3 running in most rooftops, with clean override and complaint records.
What to measure
- SG&A as a share of gross profit: 64.7% to 72.1% at six public groups in fiscal 2025 (our arithmetic)[4]
- Gross profit per employee
- Service retention; complaint and chargeback rates
Common mistakes
- Changing the pay plan after the agents are live, so the staff fight the tools.
- Running one rule set across states whose laws differ.
Your first 90 days
Stage 0 for two rooftops, then Stage 1 on their service lines, then the first sales replies. Ideally one of the two stores is in California, so the hardest price rule is tested from the start.
- Days 1 to 30
Pick two rooftops. Name the rules owner, and the service manager and BDC manager who approve. Build the approved price record and the consent fields. List every AI tool already switched on, with an owner for each. Connect the scheduler, phones and DMS reports read-only. Write down how the two stores run if the DMS goes dark tomorrow. Record a baseline: calls answered, booking rate, time to first lead reply, no-shows.
- Days 31 to 60
Turn on service phone and text answering for those rooftops, with escalate-only rules for safety and recall words. Agents draft, and a person sends, every customer message that names a price, a part or a ready time. Read 50 conversations a week and note every error.
- Days 61 to 90
Add sales first replies from the price record, with two-year storage. Compare calls answered, booking rate, first-reply time and blocked messages with the baseline. Write down every override and why. Decide whether to add the back-office checks of Stage 3, and settle how agent-booked appointments count in the pay plan before you widen anything.
How roles and the operating model change
This is our reading, not a survey finding; we found no study of how dealership jobs change with AI. AI phone and text agents make a central desk practical for a five-rooftop group without a large call center.
- 1
BDC reps
Move from first replies and confirmations to the conversations that need a person: the trade question, the credit worry, the shopper comparing two stores. They work the exception queue the agents fill.
- 2
Service advisors
Spend less time on the phone and more on estimates, approvals and customers at the counter. With 16 technicians in the average store, an advisor's hour is worth more selling inspected work than booking appointments.
- 3
F&I managers
Remain the only people who structure credit and present products. Agents prepare the menu and check the jacket afterwards for missing disclosures and signatures.
- 4
Office manager and title clerk
Become reviewers of the checks agents run on contracts in transit, stips, payoffs and titles, and the people who correct what the checks find.
- 5
A new role: the process and rules owner
Keeps the price rules, consent rules, message templates, approval limits and kill switches for the group, by state and brand. In a small group it is part of the GM's or controller's job; in a large one it is a team.
- 6
The Safeguards Qualified Individual
Adds an inventory of agents and their access to the information security program, reviews each AI vendor as a service provider, and decides which models may see restricted fields.
The pay-plan question
Compensation was 43.9% of gross profit at AutoNation and personnel costs 41.7% at Asbury in 2025[1,2], and much of it is commission. If an agent books the service appointment at 11 p.m., does the advisor who writes it up the next morning get the same credit? If a lead agent sets the sales appointment, who is paid on the sale? Settle it before agents go live; a BDC that thinks the agent is taking its spiff will route around it. We found no published model for this.
The DMS decision
Asbury chose to move its system of record to a single platform that, in its words, is "expected to make it easier to enhance technology"[1]. Other groups will keep their DMS and connect a control layer to it. Either way the questions are the same: who holds the rules for agents, how they are checked across every tool and rooftop, and what happens to the agents when the DMS is down. The CDK outage showed that one vendor can stop every store at once.
What not to fully automate
An agent can prepare each of these. A named manager with authority at that rooftop decides, and the decision is recorded.
The rules that bite
The rule a dealer's AI meets first is a California pricing law that never mentions AI. The FTC's national CARS Rule was struck down in January 2025, yet 2026 still brought pricing FAQs, 97 warning letters and two settlements over fees and add-ons. Six groups of rules recur below, each followed by what it means for an agent.
Total price and add-ons
- FTC pricing FAQs
- Under Section 5 of the FTC Act, the FTC says that "if a dealer requires a consumer to pay a fee to purchase the car, that fee must be included in the advertised price," including "the full document fee." If some buyers pay a higher mandatory doc fee, "the dealer must build that higher fee into the advertised price." On listing pages "the actual price must be listed as the most prominent amount," and dealers may not "imply that an installed 'option' cannot be removed"[6]. The FAQs do not mention chatbots or texts; applying them to automated replies is our reading.
- FTC warning letters
- On 13 March 2026 the FTC warned 97 dealership groups that "the prices they advertise must be the total price, including all mandatory fees"[7]. The letters are dated 11 March; the FTC's automobiles page lists Sonic Automotive, a public group, among the recipients[8].
- The vacated CARS Rule
- The FTC's national CARS Rule was vacated by the Fifth Circuit on 27 January 2025 because the agency skipped an advance notice of proposed rulemaking[9]. Its ideas live on in FTC orders: the Lindsay order requires "express, informed consent before charging consumers"[10], and in state law such as California's (below).
- Earlier FTC dealer casesPart to be confirmed
- The Napleton settlement (reported as $10 million, 2022) and the Leader Automotive case (2024) are often cited on junk fees and unequal add-on pricing. The FTC case pages returned errors when we checked, so their details are to be confirmed.
For agents: Every chat answer, lead reply, text and listing that names a car or a payment is an advertised price. A rule should block any such message that does not carry the total price from the approved price record.
Credit, adverse action and fair lending
- ECOA and Regulation B
- Dealers excluded from CFPB authority by section 1029 of the Dodd-Frank Act fall under the Federal Reserve's Regulation B (12 CFR 202). Credit applications and adverse action records must be kept for 25 months (202.12(b)). Where a deal involves more than one creditor, "each creditor taking adverse action must comply," directly or through a third party, and a notice sent for several creditors must name them (202.9(g))[13]. Which party actually sends the notice in indirect auto lending is set by the dealer's agreements with its lenders; confirm yours.
- Unequal add-on pricing
- The FTC alleged that Asbury stores charged Black and Latino customers more for add-ons. Asbury disputed it and the FTC withdrew the matter from adjudication on 3 September 2026, so these are allegations, not findings[12].
- Colorado SB26-189Part to be confirmed
- From 1 January 2027, automated decision-making technology used in consequential decisions, which include "financial or lending services," needs notice at the point of interaction, a plain-language explanation within 30 days of an adverse outcome, and a right to meaningful human review. The bill sets a three-year minimum for compliance records[14]. Whether an AI that pre-screens or structures a deal at a dealer is covered, and how the three-year period applies to dealers, is to be confirmed against the Attorney General's rules, due by 1 January 2027.
For agents: No agent decides credit, picks the lender or writes an adverse action notice. Agents may track that notices went out and assemble the per-deal record a reviewer will ask for.
Customer financial data: the FTC Safeguards Rule
- Who is coveredPart to be confirmed
- The Safeguards Rule's own example names a dealership that leases cars for more than 90 days as a financial institution for its leasing business[15]. The FTC's companion Privacy Rule states that it covers motor vehicle dealers described in 12 U.S.C. 5519, except those whose retail credit contracts are not routinely assigned to an unaffiliated finance source[16]. Coverage of dealers that arrange, rather than lease, financing is widely treated as settled; we did not find the FTC's own Safeguards wording saying so, so it is to be confirmed.
- What it requires of agents
- Access limited to authorized users and "only to customer information that they need"; multi-factor authentication for anyone accessing an information system; controls to "monitor and log the activity of authorized users"; oversight of service providers; disposal of customer information no later than two years after it was last used, unless there is a business or legal reason to keep it[15]. A Qualified Individual runs the program, and an event involving at least 500 consumers' unencrypted information must be reported to the FTC within 30 days of discovery[17].
- How long to keep activity logsPart to be confirmed
- The rule requires logging but we found no fixed retention period for the logs themselves. To be confirmed with counsel; most groups set one in their written program.
For agents: An agent that reads credit applications is an authorized user whose access must be limited and logged, and its vendor is a service provider that needs contract terms and periodic review.
Texts, calls and bots
- TCPA and AI voices
- The FCC ruled on 8 February 2024 that AI-generated voices are "artificial" voices under the TCPA[18]. An AI voice agent calling out needs the same consent as a prerecorded call, and telemarketing calls need prior express written consent. The FCC's one-to-one consent rule for lead generators was vacated by the Eleventh Circuit on 24 January 2025[19]; the general consent rules remain.
- State calling lawsPart to be confirmed
- Florida bars unsolicited sales calls and texts that use an automated system to select and dial numbers without prior express written consent, and gives consumers a private right of action[20]. Oklahoma is often cited as having a similar law. Its terms, and whether service and marketing texts need separate consent in each state, are to be confirmed per state.
- Bot disclosurePart to be confirmed
- California makes it unlawful to use a bot online "with the intent to mislead the other person about its artificial identity" to sell goods or services, and requires a disclosure that is "clear, conspicuous, and reasonably designed to inform"[21]. Utah and Maine have chatbot disclosure laws we could not open; their terms are to be confirmed.
For agents: Consent is checked per message, by purpose and channel. A declined-work reminder is marketing; a status update on today's repair order is not. Every chat and voice conversation says it is automated.
Vehicle disclosures and recalls
- Used Car Rule
- A Buyers Guide must be displayed before a used vehicle is offered for sale. It says whether the car is sold as is, with implied warranties only, or with a dealer warranty; it becomes part of the contract and overrides contrary terms; Spanish-language sales need the Spanish form[22].
- Odometer disclosure
- Required on transfer. Vehicles of model year 2011 or newer are exempt only after 20 years[23].
- Open recallsPart to be confirmed
- Federal law bars a dealer from selling or leasing a new vehicle once the manufacturer has notified it of an open recall, until the remedy is done[24]. The statute speaks of new vehicles; rules for used cars come from state law and, for advertising, from FTC orders. Asbury discloses a 2016 FTC consent order over ads that "did not adequately disclose information about used vehicles with open safety recalls"[1]. State used-car recall rules are to be confirmed.
For agents: Agents never edit a contract, an odometer statement or a Buyers Guide. A recall or safety word in a message can only send it up to an advisor.
OEM and franchise rules
- Warranty and incentivesPart to be confirmed
- Each manufacturer's policy manual sets warranty labor operations, documentation, claim deadlines, audits and chargebacks, and its incentive programs set who qualifies for a rebate. State dealer franchise laws set warranty reimbursement and limit chargeback look-back periods. The specifics vary by state and brand and are to be confirmed for yours.
- Advertising and CPOPart to be confirmed
- OEM advertising co-op and certified pre-owned programs carry their own content rules. We found no public OEM policy on AI agents in customer contact; ask your brands.
For agents: Rebate eligibility comes from the OEM program data, not from a salesperson or an agent's guess. Claim text comes from the technician's own notes.
Retention, in one place
The lead-reply log is evidence you must keep under the CARS Act, while the credit application next to it should be disposed of on schedule under the Safeguards Rule. One retention setting cannot do both; set it per record class.
When it goes wrong
Real cases first, with what each teaches a dealership group.
The $1 Tahoe (Chevrolet of Watsonville, December 2023)
Users got the dealer's website chatbot, supplied by Fullpath, to agree to sell a 2024 Tahoe listed at $58,195 for $1 and to call it "a legally binding offer - no takesies backsies." No car was sold. The vendor's CEO said users "came in looking for it to do silly tricks"[36].
The lesson: A sales bot should have no ability to state or agree a price, and should treat instructions typed into the chat as text, not orders.
The CDK ransomware outage (June 2024)
After the attack on 19 June 2024, the DMS and core functions were down until the end of June and integrations until the end of July. AutoNation estimated a $2.17 hit to 2024 earnings per share, paid about $43 million to commission staff and booked $60.5 million of after-tax insurance recoveries in 2025[2]. CDK reportedly paid a $25 million ransom; Anderson Economic Group estimated dealer losses at $605 million for the first two weeks, figures we saw only in a secondary source[37].
The lesson: Agents must stop or degrade safely when the system of record is down or stale, and the store needs a manual mode it has practiced.
Lindsay Automotive Group (FTC and Maryland, April 2026)
Advertised low prices, then added mandatory fees; told buyers they did not qualify for rebates; required dealer financing; added service plans, tire and wheel coverage and GAP without consent. More than $75 million in charges became eligible for refunds, plus a $3.1 million Maryland penalty[10].
The lesson: Every price message comes from one approved price. Add-ons need recorded consent. Rebate eligibility comes from the OEM program, not from whoever is talking to the customer.
Manchester City Nissan (FTC and Connecticut, August 2026)
Fees for certification, add-ons and government charges "without the consumers' consent", settled for $4 million[11].
The lesson: The same lesson on used and certified cars: what the customer agreed to has to be on the record, product by product.
Asbury and three Texas stores (FTC, 2024 to 2026)
The FTC alleged payment packing, add-ons customers "did not agree to or were falsely told were required," and higher add-on charges for Black and Latino customers. Asbury disputed the claims and sued the FTC; the FTC withdrew the matter from adjudication on 3 September 2026. These are allegations, not findings[1,12].
The lesson: Add-on pricing should be explainable deal by deal and comparable across customers, so the store can answer the question with records.
97 warning letters (FTC, March 2026)
Letters dated 11 March to 97 dealership groups, including Sonic Automotive, a public group, saying advertised prices must be the total price including all mandatory fees[7,8].
The lesson: The FTC is checking advertised prices at scale. That is the content lead agents now produce by the thousand.
Moffatt v. Air Canada (another sector, February 2024)
A Canadian tribunal held the airline liable for its chatbot's wrong answer on a fare policy[38].
The lesson: A dealer's chatbot answer on price, warranty or return rights is likely to be treated as the dealer's own statement.
We found no public enforcement action naming an AI agent or chatbot at a dealer, and no TCPA suit over a dealer's AI voice agent. We do not claim one exists. Every case above turns on a price, a fee, an add-on or a consent record; the scenarios below show how an agent could produce the same problem.
Agent failures to design against
Each is a scenario, not a reported case, and each maps to one of the control points.
The OrchKernel blueprint for a dealership group
OrchKernel is the layer between AI agents and the systems your stores run on, as drawn in the missing layer. Agents send their actions through it; it checks the rules for that rooftop, holds what needs a manager, and records what happened.
What it is not. OrchKernel is not a DMS, a CRM, a phone agent or a pricing tool, and it does not decide prices or credit. The DMS stays the system of record for deals, repair orders and accounting. OrchKernel governs the actions sent through it. A vendor chatbot that answers shoppers on its own, or a CRM feature that sends texts directly, is outside OrchKernel unless those actions are routed through it; deciding which ones must be is part of the Stage 0 inventory.
The mechanisms
- Approvals
- The action waits for a named manager, who sees exactly what will happen: the counter-offer against the published price, the recon order and the limit it breaks. It runs once, as approved.
- Rules
- Checked at the moment of action, the same way at every rooftop and in every tool: no vehicle or payment message without the total price, no send without consent for that purpose and channel. A rule allows, holds or denies, with a reason.
- Acting on a named person's authority
- A lead reply goes out under the BDC manager whose templates apply; a recon release under the used-car manager's limit. The agent has no more access than that person, and loses it when they do.
- Data access by role and field
- SSN, date of birth, income and license images stay hidden from agents that do not need them, and only models the Qualified Individual has cleared receive restricted fields. Each rooftop sees its own records; the group sees all.
- Tamper-evident audit log
- What was sent, from which price record, under whose authority, which rule fired and who approved, chained so an edited or deleted entry shows. For agents' own actions this is the user-activity logging the Safeguards Rule asks for.
- Human queue
- Safety and recall messages, cancellations, complaints and document mismatches land with a named owner and a clock. An agent may raise a case's priority, never lower it.
- Connections to your systems
- The group connects its DMS (CDK, Reynolds and Reynolds, Tekion, Dealertrack or others), its CRM, the inventory feed, the service scheduler and phones, texting, lender portals for status, and OEM warranty and recall lookups, with its own authorization and starting read-only. OrchKernel holds the credentials so agents never do.
Sixteen control points
Where a dealership group needs a control whatever tools it uses, who owns it, and what enforces it.
What customers are told and quoted
Deals, credit and add-ons
Service, warranty and inventory
Data, consent, records and tools
What belongs elsewhere
- Deals, repair orders and accounting
- The DMS stays the system of record. OrchKernel does not replace it.
- Credit decisions and pricing models
- The lender decides credit; your desk and pricing tool set prices. OrchKernel keeps agents to the approved price.
- The legal content of disclosures and forms
- Counsel and the forms vendor. OrchKernel checks that a disclosure was given, not what it should say.
- OEM warranty policy and audits
- The manufacturer.
- Fair-lending testing of add-on prices
- Compliance analysts or outside reviewers. OrchKernel can supply the per-deal records they need.
- Security of the DMS and the store network
- The DMS vendor and the dealer's IT, under the Safeguards program.
- Pay plans, hiring and training
- The dealer principal and the managers.
OrchKernel is source-available under the Business Source License and runs on your own servers, so you can read the code that enforces these controls.
Scorecard by stage
Record your baseline before Stage 1, then track the same numbers at each stage. Public benchmarks exist for service volume, F&I per vehicle and SG&A share of gross. For lead response, contracts in transit, warranty rejections and recon days we found none; NADA's 20 Group data and the mystery-shop scores are private.
What we could not find
Open questions from our research. If you have good data on any of them, write to support@prefero.ai.
- An independent, public benchmark for lead response: time to first reply, share answered, accuracy.
- The Pied Piper finding that about 1 in 6 service callers could not get a date and time; we saw it only through a press listing.
- Industry-wide dealer net profit, which NADA's free report no longer shows, and turnover by role, which sits in NADA's paid workforce study.
- The FTC's own wording on Safeguards Rule coverage of dealers that arrange, rather than lease, financing, and a fixed retention period for activity logs.
- How Colorado SB26-189 applies to dealer-side deal structuring and pre-screening, pending the Attorney General's rules.
- The Napleton (2022) and Leader Automotive (2024) FTC cases, whose pages returned errors.
- Anderson Economic Group's CDK loss estimates, seen only via a secondary source; a later three-week figure is also reported.
- Federal and state rules on selling used cars with open recalls; state limits on warranty chargebacks; Oklahoma's calling law; Utah and Maine chatbot disclosure laws.
- OEM policies on AI agents in customer contact and co-op advertising.
- Any TCPA suit or enforcement over a dealer's AI chatbot or voice agent.
- The UK motor finance commission redress scheme, a cautionary tale on undisclosed dealer compensation; not US, and the regulator's pages returned errors.
Sources
Sources were read in October 2026; dates are publication or data dates.
Primary sources
Regulators, legislatures, courts, federal statistics and SEC filings. Ratios marked as our arithmetic are calculated from the filed statements.
- 1Asbury Automotive Group, Form 10-K for fiscal 2025. SEC EDGAR, filed 20 February 2026.
- 2AutoNation, Form 10-K for fiscal 2025. SEC EDGAR, filed 12 February 2026.
- 3Carvana, Form 10-K for fiscal 2025. SEC EDGAR, filed 18 February 2026.
- 4XBRL company facts for Lithia, Penske, AutoNation, Group 1, Asbury and Sonic, fiscal 2025. SEC EDGAR APIs, 10-Ks filed February 2026.Ratios are our arithmetic
- 5SB 766, California Combating Automobile Retail Scams (CARS) Act. California Legislature, approved 6 October 2025; operative 1 October 2026.
- 6Automobile industry pricing transparency FAQs. Federal Trade Commission, September 2026.
- 7FTC warns 97 auto dealership groups about deceptive pricing. Federal Trade Commission, 13 March 2026.
- 8Automobiles: industry page listing cases and the March 2026 warning letters. Federal Trade Commission, letters dated 11 March 2026.
- 9National Automobile Dealers Association v. FTC, No. 24-60013. US Court of Appeals for the Fifth Circuit, 27 January 2025.
- 10FTC, Maryland Attorney General secure full refunds and additional penalties against Lindsay Auto Group. Federal Trade Commission, 2 April 2026.
- 11Chase Nissan (Manchester City Nissan), case page. Federal Trade Commission, settlement August 2026.
- 12Asbury Automotive Group, Inc., et al., in the matter of (222-3135). Federal Trade Commission, withdrawn from adjudication 3 September 2026.
- 13Regulation B, Equal Credit Opportunity (12 CFR part 202), including 202.9 and 202.12. eCFR, current text, read October 2026.
- 14SB26-189, automated decision-making technology. Colorado General Assembly, signed 14 May 2026; operative 1 January 2027.
- 15Standards for Safeguarding Customer Information (16 CFR part 314). eCFR, current text, read October 2026.
- 16Privacy of Consumer Financial Information (16 CFR part 313), scope at 313.1(b). eCFR, current text, read October 2026.
- 17FTC Safeguards Rule: what your business needs to know. Federal Trade Commission.
- 18FCC makes AI-generated voices in robocalls illegal (declaratory ruling). Federal Communications Commission, 8 February 2024.
- 19Insurance Marketing Coalition v. FCC, No. 24-10277. US Court of Appeals for the Eleventh Circuit, 24 January 2025.
- 20Florida Statutes 501.059, telephone solicitation. Florida Legislature.
- 21Business and Professions Code 17941, bot disclosure. California Legislature, operative 1 July 2019.
- 22
- 23
- 2449 U.S.C. 30120(i), limitation on sale or lease of new vehicles under recall. Legal Information Institute, Cornell Law School.
- 25Occupational Outlook Handbook: automotive service technicians and mechanics. US Bureau of Labor Statistics, 2025 data.
Industry bodies and independent research
NADA's public annual data report, and one independent mystery-shop study we saw only through a press listing.
- 26NADA Data 2025: annual financial profile of America's franchised new-car dealerships. National Automobile Dealers Association, full-year 2025.
- 27Pied Piper Service Satisfaction Evaluation, 2026 (press listing of Automotive News coverage). Pied Piper Management Company, 2026.Secondhand: the article itself was blocked
Vendor sources
Published by companies that sell software to dealers, including research they ran themselves. Directional, not an industry benchmark.
- 28Automotive dealers are ready for AI to deliver outcomes and skip the hype (AI readiness study, n=537). Cox Automotive, 28 October 2025.Vendor sourceVendor-run research
- 29Cox Automotive Car Buyer Journey study, 2025 (n=2,300). Cox Automotive, 13 January 2026.Vendor sourceVendor-run research
- 30
- 31Tekion sets a new standard for agentic AI in automotive retail (NADA 2026). Tekion, 2026.Vendor source
- 32
- 33
- 34
- 35Point Predictive: auto lending fraud risk (2025 report). Point Predictive.Vendor sourceLoss figures gated
Company and press
News coverage and encyclopedia summaries of events whose primary documents we could not open.
- 36A Chevy for $1? Car dealer chatbots show perils of AI for customer service. VentureBeat, 19 December 2023.
- 37CDK Global (2024 cyberattack; data-access litigation). Wikipedia.Secondary source, citing press reports
- 38