Customer Drawings and AI: A Plain Checklist for Job Shops

Why this matters now

AI quoting tools work by reading your customers' drawings and models. That is the point of them. It also means a customer's intellectual property is leaving your building and landing on someone else's servers. Most of the time that is fine. Sometimes it breaks a contract, and for some shops it can create a legal problem.

At least one major tool is upfront about the limit. CloudNC states: "At this time, Quote Agent is a cloud-based service and we do not recommend uploading export-controlled data" (CloudNC, fetched Oct 2026). If a vendor says that about its own product, every shop should know where its own lines are before uploading anything.

This page is a practical checklist, not legal advice. If your shop does defense, aerospace or other controlled work, your compliance lead or attorney has the final word.

Step 1: Sort your work into three buckets

Before choosing any tool, put each customer or part family into one of three buckets:

1. Commercial, no special terms. Standard drawings with no non-disclosure agreement (NDA) or a general one. Usually fine for a reputable cloud tool, once you check its data terms.
2. Commercial with an NDA or customer data terms. Read the agreement. Some restrict sharing with third parties or require you to keep files on systems you control.
3. Controlled. Work covered by ITAR (International Traffic in Arms Regulations), EAR (Export Administration Regulations) or contract terms for controlled unclassified information (CUI). Keep it out of general-purpose AI tools unless your compliance lead has approved that specific setup.

If you cannot tell which bucket a job belongs to, treat it as the stricter one until someone checks.

Step 2: Read the vendor's data terms, and ask five questions

Marketing pages rarely answer these. Ask the vendor in writing:

• Do you train your models on my files? If yes, can I switch it off, and is that the default?
• Where are files stored, and for how long? Which country, which cloud provider, what retention period.
• Can I delete a file, and will you confirm deletion?
• Who on your side can see my files? Support staff, contractors, subprocessors.
• What happens to my data if I cancel?

Keep the answers in a folder. If a customer ever asks how their drawings were handled, you will have a written record instead of a memory.

Step 3: Keep the account in your name

Open AI accounts under the shop's email domain, not an employee's personal email. Turn on two-factor sign-in. When someone leaves, you shut off their access in one place. This sounds obvious, but free AI chat tools are easy to start on a personal login, and then customer drawings live in an account the shop does not control.

Step 4: Watch the free chat tools

The most common leak is not a quoting tool at all. It is someone pasting a drawing or a customer email into a free chat assistant to "get a quick read on it." Many consumer AI products have different data terms from their business versions. Set a simple rule: no customer files in any AI tool the shop has not approved. Then give people an approved option, or they will find their own.

Step 5: Write a one-page rule sheet

Every shop using AI on customer files should have a single page posted where estimators can see it. Here is a starting version you can adapt:

Customer drawings and AI: shop rules

1. Only approved tools: [list them].
2. Controlled work (ITAR, EAR, CUI) never goes into any AI tool unless [compliance lead] approves in writing.
3. Check the customer's NDA or terms before uploading. If unsure, ask [name].
4. Use shop accounts only. No personal logins.
5. AI drafts; people decide. No price, lead time or message goes to a customer without a person approving it.
6. Report mistakes the same day to [name]. Mistakes reported early are fixable.

Last reviewed: [date]

Review it whenever you add a tool or a customer with special terms.

Step 6: Decide what to do with controlled work

If you have a meaningful share of controlled work, you have three honest options:

• Keep it manual. Use AI only for commercial jobs and quote controlled work the way you always have. Simple and safe.
• Use AI only for the paperwork around the drawing. Follow-up reminders and won/lost tracking can run on quote numbers and dates without ever touching a drawing.
• Ask about an approved setup. Some shops may be able to use tools hosted in environments their compliance lead approves. That is a question for your compliance lead and the vendor, not a checkbox.

Notice the second option. Much of the value in quoting, such as follow-up on quiet quotes and knowing why you lose, does not require the drawing at all.

A note on customer trust

If a buyer asks how your shop uses AI, a shop that can answer in one sentence ("Approved tools only, controlled work stays out, a person approves every quote") looks more careful, not less. The rule sheet is also a sales asset.

Where to go next

• Comparing tools? Use the five vendor questions above alongside our side-by-side of Paperless Parts, CloudNC Quote Agent and Uptool.
• New to all of this? Start with the front-office guide.

If you would like a second opinion on where your lines are, Lunan offers a free conversation of your quote flow, including where customer files go today. For controlled work, we will tell you when the right answer is to leave AI out.