DMS Systems, Data, Security, I.T.

A dealer asks about Auto-lead Data Format (ADF), an XML-based industry standard for transmitting consumer purchase requests to dealerships, and community members provide resources and examples. The thread briefly discusses an alternative standard called STAR that offers richer data capabilities, though ADF remains more widely supported by dealer CRM systems. The key insight is that while better standards exist, adoption barriers like limited IT budgets and the need for broad CRM compatibility keep dealers reliant on the established ADF format despite its limitations.

Teresa Bordenet addresses the escalating spam problem facing dealerships, which impacts both incoming and outgoing communications—dealerships are flooded with inbound spam calls (robocalls, scams, telemarketers) that consume resources, while simultaneously having their own phone numbers flagged as spam when contacting customers and prospects. The thread discusses strategies and solutions for combating this dual challenge that increasingly affects dealership operations and customer relationships. This is essential reading for dealership managers and IT professionals seeking practical approaches to protect phone lines and maintain communication credibility with customers.

Dealers and vendors discuss the fragmented landscape of e-signature solutions across multiple platforms (DMS, CRM, F&I portals, digital retailing, and standalone), with the core challenge being that no existing solution adequately handles the complex, interconnected requirements of modern deal documentation—varying by inventory type, deal structure, lender, state, and manufacturer. The key insight is that building an effective e-signature workflow requires working backwards from the end goal (getting funded) to map all required documents and their dependencies, a complex undertaking that existing vendors have failed to simplify or integrate effectively, making custom solutions surprisingly necessary despite their cost.

CDK announced Fortellis, a developer platform that opens CDK DMS data to third-party developers through standardized APIs at potentially reduced costs, marking a significant shift from their previous closed, expensive vendor model. Forum participants speculate this move could disrupt competitors like Reynolds and Cox, enable innovative integrations that weren't previously possible, and potentially evolve into an app store marketplace model similar to AWS or Apple's ecosystem. The key insight is that this represents a strategic business pivot—possibly defensive against competition and litigation—rather than simply making existing APIs more accessible.

A federal court granted Authenticom a preliminary injunction in July 2017 against CDK Global and Reynolds & Reynolds for blocking data integration services, finding the companies likely violated antitrust laws. However, the legal victory came at a significant cost—Authenticom later laid off 55 of its nearly 110 employees due to financial pressure from the lawsuit. The thread reveals widespread frustration among industry professionals that major associations like NADA failed to intervene in what participants view as anti-competitive behavior that artificially inflates dealer costs through restrictive data access policies.

A CRM developer asks how to integrate customer data into Dealertrack and RouteOne finance applications for dealer customers. The response clarifies that direct integrations with these platforms require negotiating separate contracts with each company rather than being immediately available. The thread provides limited detail but establishes that third-party integration is possible through formal partnership agreements.

An independent dealership owner seeks DMS/CRM solutions for their 145-car lot and BHPH operation, ultimately choosing iDMS for its collections capabilities while planning to keep service and collision software separate. Several DMS vendors (AutoSoft, Automatrix, DealerSocket) are mentioned as alternatives, with mixed reviews about their quality and post-acquisition performance. The key insight is that finding integrated software meeting all needs—especially BHPH collections—remains challenging, and some formerly strong products have declined after being acquired by larger companies.

A parts department employee sought help getting an HP printer to work with their ERA DMS system's print command, as the Reynolds software drivers appeared incompatible with the newer hardware. The most practical suggestion was to test with a working printer from another station to isolate the issue before contacting support, though the original poster remained uncertain about driver solutions and worried about losing printer access if they escalated the problem.

Emily seeks guidance on integrating online parts sales with DealerTrack DMS while addressing her controller's invoicing and accounting concerns. Jeff raises a secondary concern about fraud in online parts orders, while DMSEXPERT87 offers a potential solution, indicating that custom API integrations between Parts and General Ledger modules in DealerTrack can bridge this gap. The thread suggests the issue is solvable through technical integration, though no detailed resolution is documented.

MikeHaeg initiates a discussion about the rising problem of spam and robocalls, noting that the FCC considers unwanted calls their top consumer complaint, and references efforts by phone carriers and app developers to combat the issue. nduplantis shares a practical workaround that has reportedly doubled their connection rate: rotating tracking numbers for outbound calls every 30 days to avoid being flagged as spam. The key insight is that dealerships can improve call connection rates by regularly cycling their outbound phone numbers to maintain a fresh reputation with spam-filtering systems.

Brad Burlingham asks whether sharing customer data with marketing vendors (AutoAlert, direct mail companies, Facebook) violates CCPA opt-out requirements, since he only shares data for marketing on his behalf rather than selling it outright. CarlAutofusion clarifies that data sharing with vendors is compliant under CCPA if the vendor has a written contract explicitly prohibiting the sale of consumer information and restricting the vendor to only the contracted services, which resolves Brad's concern about continuing legitimate marketing activities.

A dealer principal is considering switching to DealerTrack and asks for current reviews after finding a largely negative 2012 post. Respondents indicate DealerTrack is a middle-tier option—better than budget providers but lacking the capabilities of major competitors like CDK, with particular criticism of their lender portal design and limited rep support—ultimately suggesting it's adequate but not impressive for the price.

Dealership managers are experiencing freezes and "Does Not Respond" errors when using CDK's Executive Desktop to view reports in Enhanced Store View, with CDK acknowledging this as a known issue they've been working on for months. Beyond the technical problem, users express broader frustration with CDK's customer service quality, billing practices (including overchararged hardware and inflated installation costs), and perceived indifference since their acquisition of the ADP platform—suggesting systemic issues with the vendor rather than isolated technical glitches.

CDK (formerly ADP Dealer Services) has implemented a new "SecurityFirst" certification program that dramatically increases vendor access fees to dealer DMS data from ~$70/month to $250-$300/month per data package, with costs to be passed to dealers. Forum participants view this as a revenue grab rather than genuine security enhancement, questioning CDK's authority to monetize dealer data and comparing the company to data brokers. The thread suggests dealers feel trapped by their DMS provider's ability to control access to their own business data.

A user warns automotive dealership professionals about a widespread sextortion email scam in which fraudsters falsely claim to have hacked the recipient's computer and recorded compromising video content, threatening to release it unless payment is made in bitcoin. The scam is entirely fraudulent—the hackers have no actual footage or access to victims' devices. Dealership staff should recognize these emails as empty threats and avoid paying, as doing so only encourages further scams.

Diana Eidson warns about evolving CEO fraud and gift card phishing scams targeting dealership employees, noting that attackers are becoming more sophisticated by establishing credible pretexts, requesting confidentiality, and requesting larger amounts (up to $4,000). The discussion shifts toward practical security measures, with Rick Buffkin highlighting that using alternative communication platforms like Slack instead of email could mitigate many of these attacks, and noting his own discovery that vendors often grant access to agreements and invoices without proper verification of requester identity.

A Redbanc employee fell victim to a sophisticated social engineering attack after being recruited via LinkedIn, where scammers conducted phone and Skype interviews before tricking them into installing malware disguised as an application generator ("Red Flag"/ApplicationPDF.exe). The post warns dealers and IT professionals about the growing threat of job-posting scams targeting employees and emphasizes defensive practices like verifying unexpected communications directly with senders rather than clicking links. The key insight is that cybercriminals are increasingly using realistic recruitment scenarios to breach company networks, making employee security awareness critical across the dealership industry.

The thread begins with a cautionary post about phishing scams targeting Wichita State University employees, but quickly pivots when members suspect the original poster of cross-posting promotional content from LinkedIn without disclosing a product pitch. Discussion reveals skepticism about the relevance to the automotive industry and concerns that the content may be part of a broader spam strategy rather than genuine community education. The thread ultimately reflects the community's vigilance against marketing disguised as security awareness.

Diana Eidson alerts the community to "Collection#1," a massive data breach containing over 2.6 billion email/password combinations, and recommends protective measures like using unique passwords and password managers. Moderator Alex Snyder becomes suspicious of the post's promotional tone and removes links, while member Alexander Lau dismisses it as spam, though Eidson clarifies she works in IT and eventually identifies the breach as a spoof discovered on haveibeenpwned.com with a Mashable article as source.

Jay Nelson seeks recommendations for F/I (Finance & Insurance) menu providers and specifically asks about MenuVantage. Alexander Lau responds by identifying MenuVantage as a CDK Global product, providing a direct link to CDK's menu selling solution. The thread appears to be in its early stage with limited discussion, serving primarily as a product identification resource rather than a substantive comparison of F/I menu providers.

Jeff Kershner shared the November 2016 General Motors iMR Approved Turnkey Vendor List, which includes vetted vendors for services like online dealer chat and email/directory solutions, inviting the community to suggest additions or removals. A respondent noted that GM dealers can access this same information through the Dealer Vendor Advisor tool in GM Global Connect, suggesting the community resource may be redundant with official GM channels. The thread appears to be a brief informational post with limited engagement around vendor management options.

The thread discusses security measures for dealerships, with participants sharing that cameras and alarms are standard but noting that camera footage is rarely useful for prosecutions, making visible deterrence more valuable than actual enforcement. Alexander Lau introduces biometric and face-recognition technology as an emerging tool for both security and customer analytics, while craigh adds that such systems work well in luxury retail but have failed in automotive applications due to technical limitations with beacon range detection.