Manufacturing
Customer drawings and specs in manufacturing records: what must be excluded
By SourceX Editorial · Reviewed by Noah Loul ·
Short answer
Customer drawings, models and specifications should be excluded from any manufacturing data license unless the customer has agreed in writing, along with records that reproduce them, such as inspection data against their dimensions and part numbers that identify their products. Internal decisions, process notes and scheduling records usually remain once customer identifiers are removed.
Key takeaways
- Customer drawings and specifications are excluded by default; written customer consent is the usual exception.
- Derived records such as inspection reports, CMM programs and first article reports can reproduce a drawing without containing the file.
- Part numbers tied to a customer identify the product and are replaced with internal codes.
- Scheduling, maintenance and process decisions usually remain after preparation.
- Export-controlled technical data is excluded entirely, not screened.
Why are customer drawings excluded by default?#
Customer drawings are excluded by default because they usually belong to the customer, arrive under confidentiality terms and describe the customer's product rather than your work. Build-to-print manufacturers hold large volumes of them, scattered across the ERP, a PDM system, shared drives, job packets and email.
Purchase terms, NDAs and quality agreements commonly treat drawings, models and specifications as the customer's property or confidential information, and some require their return or destruction when the relationship ends. Trade secret law may also apply. Even where the terms are silent, licensing another company's design files without permission invites a dispute with a customer you depend on.
Jointly developed parts are the grey zone. When your engineers improved a customer's design, who owns the improvement depends on the development agreement or purchase terms, and counsel should decide that before those records are classified.
The screen list: what to exclude#
The screen list covers the drawing itself and every record that carries a piece of it. Most build-to-print shops find that the drawing files are the easy part; the derived records spread across quality, programming and quoting take longer to find.
Export-controlled technical data sits outside this list because it is excluded entirely rather than screened. Under the ITAR, technical data includes information required for the design, production, manufacture, repair, testing or modification of defense articles, in forms such as blueprints, drawings, photographs and plans, and the EAR defines technology as information necessary for the development, production or use of an item. Releasing either to a foreign person inside the United States can count as an export, so identify and wall off this material before reviewing anything else, with export control counsel involved.
| Item | Where it hides | Why it is excluded |
|---|---|---|
| Drawings and 3D models | PDM, ERP attachments, shared drives, email | Customer property or confidential information |
| Specifications and material standards | Job packets and quality folders | Customer requirements and know-how |
| Customer part numbers and revision letters | Item master, orders, labels | Identify the customer's product |
| Inspection data against customer dimensions | CMM reports, first article and PPAP files | Reproduces the drawing as numbers |
| CNC and CMM programs for customer parts | CAM files and machine controls | Encode the part geometry |
| Customer-owned tooling drawings | Tool room records | Tooling and its design often belong to the customer |
| Quotes with prints attached | Quote files and CPQ records | Confidential terms and embedded drawings |
Why derived records are the hard part#
Derived records are the hard part because they can reproduce a customer design without containing the drawing file. A CMM report listing every nominal dimension and tolerance, or a CNC program with its toolpaths, lets a reader rebuild much of the part.
Free text carries the same risk in smaller pieces. A job note that quotes a tolerance, a material callout or a special process requirement from the print leaks a fragment of the customer's specification. Screening has to cover structured fields, attachments and notes, and free text needs a human read after any automated pass.
Photos are easy to overlook. Pictures taken for setups, first articles or nonconformances often show drawings on the bench, part markings or the part's shape, so they are excluded unless each image is reviewed.
What can usually remain?#
Records that describe how your plant runs, rather than what your customer designed, can usually remain after preparation. They are also the records that make a manufacturer's history useful to AI developers building planning, maintenance and quality tools.
- Scheduling, sequencing and expedite decisions, with customer names and part numbers replaced.
- Machine downtime, maintenance work orders and equipment history.
- Internal NCR reasoning about process causes, such as tool wear or fixture problems, without quoted dimensions.
- Labor, setup and cycle time actuals against routings coded to internal part families.
- Purchasing and supplier delivery history for commodity materials.
- Work instructions written for your own equipment, after a check that they do not restate customer specifications.
How do you run the screen in practice?#
The screen runs best in a fixed order: find where customer material lives, decide record family by record family, then check samples of the output. Working the other way round, starting from an extract and hunting for drawings inside it, tends to miss derived records.
- Inventory locations: PDM vaults, ERP attachment folders, quality shares, CAM directories, quote folders and engineering mailboxes.
- Classify customers as build-to-print, jointly developed or your own design, using the terms counsel has reviewed.
- Set a rule for each record family: exclude, transform by replacing part numbers and dropping dimensions, or keep.
- Apply the rules in the extraction itself rather than by hand, so they can be repeated and audited.
- Have someone who knows the parts read a sample of notes and fields for leaked specification detail.
- Record the rules, the samples checked and the reviewer in the rights file.
Do the same rules apply to your own product designs?#
Your own product designs follow a different analysis because you own them, but they are usually held back as well. Licensing your own drawings shares intellectual property and possibly trade secrets, and that decision belongs to the owner and counsel rather than to a records review.
Mixed companies, which make proprietary products and also do build-to-print work, should tag records by ownership early. A product line or ownership flag in the item master often does most of the sorting, and it helps with internal AI tool rules too.
Illustrative: a contract manufacturer sorts its job packets#
Illustrative: a fictional contract manufacturer of sheet metal enclosures does mostly build-to-print work for equipment makers, plus a small line of its own cabinets. Each job packet combines the customer print, the router, inspection sheets and operator notes in one PDF.
The general counsel and quality manager agree a rule: job packets are excluded as files. Router steps, setup and run actuals, scrap reasons and maintenance events are extracted from the ERP instead, with customer part numbers replaced by internal codes. Operator notes are reviewed for quoted tolerances and material callouts, and any note that restates the print is dropped.
The owner decides that the company's own cabinet drawings also stay out. The resulting scope is narrower than the shop's full archive, but every record in it describes the shop's own work.
How SourceX approaches customer drawings#
SourceX excludes customer-owned designs and export-controlled work from manufacturing packages. In the SourceX five-step transaction, the Rights step identifies where drawings and specifications live, and the Preparation step removes them along with derived records and identifying part numbers before the supplier approves anything for release.
The SourceX Evidence Packet documents the exclusions, the privacy record and the release authorization, so the supplier, its counsel and the buyer share one record of what was removed and why.
Frequently asked questions
What if the customer has gone out of business?
Rights in drawings do not simply disappear when a customer closes; they may pass to an acquirer, a successor company or an estate. Treat the drawings as excluded unless counsel confirms otherwise after reviewing the specific facts, including any asset sale that may have transferred them.
Can we license drawings we created from a customer's sketch?
That depends on the terms of the work. Under US copyright law, drawings your employees create within the scope of their jobs are works made for hire, so copyright starts with your company. A commissioned work belongs to the commissioning party as a work made for hire only in limited statutory categories under a signed written agreement, so customers usually rely on assignment clauses in purchase or development terms, and many include one. Even a drawing you own may embed the customer's confidential requirements, so have counsel review the order and any development agreement first.
Is a part number really confidential?
On its own, a part number may look harmless, but tied to a customer and an order history it can reveal what the customer buys, how often and on what terms. Replacing it with an internal code keeps the operational pattern visible while removing the identification.
Does removing drawings make the remaining records worthless?
No. Planning, maintenance, quality reasoning and labor actuals carry much of the value for AI developers, because they show how a plant makes decisions. Drawings describe products; operating records describe work, and the work is what most buyers want to learn from.
Should our AI use policy cover customer drawings too?
Yes. The same terms that keep drawings out of a licensing package can be breached by uploading them to a public AI tool. A written policy that bans customer drawings and specifications from external tools protects you whether or not you ever license data.
Sources
- 22 CFR 120.33(a)(1) defines ITAR technical data to include information required for the design, development, production, manufacture, repair, testing or modification of defense articles, including blueprints, drawings, photographs, plans, instructions or documentation. Source
- Under 22 CFR 120.50(a)(2), releasing technical data to a foreign person in the United States is an export (a deemed export). Source
- EAR technology (15 CFR 772.1) is information necessary for the development, production, use, operation, installation, maintenance, repair, overhaul or refurbishing of an item. Source
- Under 15 CFR 734.13, export includes releasing technology or source code to a foreign person in the United States, a deemed export. Source
- A work made for hire arises when an employee creates a work within regular duties, or when a work in certain statutory categories is specially commissioned under an express written agreement; the employer or commissioning party is the author. Source
Related resources
See if your company qualifies
A short company assessment. No data uploads are needed.