Manufacturing
Who owns the CAD files a customer sends with an RFQ?
By SourceX Editorial · Reviewed by Noah Loul ·
Short answer
The customer usually keeps ownership of CAD files sent with an RFQ, and the shop receives only a limited right to use them to prepare a quote, often under an NDA or the RFQ terms. A shop can generally keep its own quote, price and estimated hours, but should not reuse the models or drawings without written permission.
Key takeaways
- Possession of a STEP file or drawing does not transfer ownership; the contract terms decide what a shop may do.
- RFQ terms and NDAs commonly limit use of customer files to preparing the quotation.
- A shop's own quote, price, lead time and estimated hours are generally its own business records.
- Using customer models to train an internal or third-party AI tool needs clear written permission.
- Drawings for export-controlled parts need separate handling and are kept out of any SourceX data package.
What rights does a shop get when it receives RFQ files?#
A shop that receives RFQ files usually gets a limited permission to use them for one purpose: deciding whether to bid and preparing a quote. The customer keeps ownership of the part design, the model and the drawing, and possession of the files does not change that.
Where the RFQ comes with an NDA or written terms, those terms set the limits, often including confidentiality, use only for the quotation, and return or destruction on request. Where nothing is signed, a limited permission may be implied from the request itself, and confidentiality markings on the drawing still matter.
Trade secret law is one reason customers care about how shops handle files. Under the federal trade secret definition in 18 U.S.C. 1839(3), information qualifies as a trade secret only if its owner has taken reasonable measures to keep it secret, so customers tend to insist that suppliers restrict access and use.
What a shop may keep versus what stays the customer's#
The dividing line is between the customer's design and the shop's own work. The table shows the usual starting point; the actual answer comes from the NDA, RFQ terms, purchase order terms and any supply agreement.
| Item | Usually belongs to | Shop may keep and reuse? |
|---|---|---|
| Native CAD model or STEP file | Customer | Keep only as the terms allow; no reuse beyond the quote or job |
| 2D drawing with title block and notes | Customer | Same as the model; confidentiality markings apply |
| Customer specifications and quality clauses | Customer | Use for the quote and job only |
| The shop's quote document, price and lead time | Shop | Yes, as its own business record |
| Estimated hours, routing and material plan | Shop, unless terms assign it | Generally yes, without the customer's geometry attached |
| DFM comments sent to the customer | Often shared or disputed | Check the terms; avoid reusing customer-specific details |
| Features extracted from the model, such as hole counts or tolerances | Derived from confidential information | Check the NDA before storing them in a quoting database |
Which clauses change the answer?#
The clauses that change the answer are usually in three places: the NDA, the RFQ or portal terms, and the purchase order terms that apply if the shop wins. Read them together, because a broad assignment in the purchase order can reach items the RFQ terms never mentioned.
- Confidentiality scope: what counts as confidential and whether markings are required.
- Use restriction: language such as solely for the purpose of preparing a quotation.
- Return or destruction: whether files must be deleted when the RFQ closes or on request.
- Residuals: whether general know-how retained in memory may be used freely.
- IP assignment: whether programs, fixtures, tooling designs or inspection plans pass to the customer.
- AI and data use: whether the customer forbids uploading files to outside tools or using them for training.
- Export control notices: whether the drawing is marked as controlled technical data.
Does winning the job change who owns what?#
Winning the job adds the purchase order and any supply agreement to the picture, and those often say more about ownership than the RFQ did. Many customer terms assign to the customer the tooling, fixtures or documentation paid for under the order, while leaving the shop's general methods alone.
Copyright rules add a wrinkle for items the shop creates, such as CAM programs. As the Copyright Office describes it, work by an outside supplier counts as made for hire only when it falls in a short list of statutory categories and both sides signed a written agreement saying so; otherwise, ownership generally moves only by written assignment. Whether that applies to a given program or document is a question for counsel.
What happens to files from quotes you lost?#
Files from lost quotes carry the same obligations as files from won ones, and sometimes stricter ones, because the shop has no ongoing purpose for keeping them. Follow any return or destruction terms, and keep only the shop's own quote record without the customer's model.
Lost-quote files are where shops most often slip. They sit in an estimating folder or a quoting portal for years, and a later project, such as training an AI quoting tool on past RFQs, can sweep them in without anyone checking the terms.
Illustrative: a fabrication shop sorts its RFQ archive#
Illustrative: a fictional sheet metal and fabrication shop receives a steady flow of RFQs with STEP files and PDFs through email and a quoting portal. The owner is evaluating an AI quoting tool and also asks whether the shop's quote history could be licensed.
Counsel reviews the NDAs and terms of the shop's largest customers. Some allow internal use of files for the shop's own quoting; others limit use strictly to each quotation and require deletion. The shop decides that the AI tool will train only on its own quote records and routings, with geometry features used only from customers whose terms allow it.
For licensing, the shop scopes a package of quotes, routings, estimated and actual hours and win or loss outcomes, with customer names replaced and no customer models or drawings included. It also changes RFQ intake so each file is tagged with the customer, the governing terms and any export control marking.
How to handle RFQ files day to day#
Handling RFQ files well is mostly about knowing which terms govern each file. A few habits make that easy to show to a customer, an auditor or a buyer of the business.
| Practice | Why it matters |
|---|---|
| Store files by customer with the governing NDA or terms | Anyone can see what use is allowed |
| Tag export-controlled drawings on arrival | ITAR technical data includes blueprints and drawings for defense articles |
| Limit access to people who quote or run the job | Supports the customer's reasonable measures to keep designs secret |
| Check vendor terms before uploading files to outside tools | Some tools keep or reuse uploaded content |
| Apply return or destruction terms when RFQs close | Lost-quote files carry continuing obligations |
How SourceX treats customer-supplied files#
SourceX excludes customer-owned designs from supplier packages. In the Rights step of the SourceX five-step transaction, the supplier's records are sorted into what the company created for itself, such as quotes, routings, job costing and quality decisions, and what belongs to customers. Export-controlled work is excluded entirely.
The SourceX Evidence Packet records licensing rights and permitted use for each package, so the supplier and the buyer can see why every record type was included and that the supplier approved its release.
Frequently asked questions
Is a drawing without a confidentiality stamp free to reuse?
Usually not. Missing markings can affect how a confidentiality agreement applies, but they do not transfer ownership of the design. The customer still owns the drawing, and the shop's permission is still limited to the purpose it was sent for. Check the NDA and RFQ terms before assuming anything broader.
Who owns the CAM program a shop writes for a customer's part?
It depends on the purchase order and supply terms. Absent an assignment, the shop may have a claim to the program it wrote, but the program embodies the customer's geometry and is usually limited to making that customer's parts. Many customers require programs to be delivered or assigned, so read the terms.
What if the NDA has expired?
Expiry of the term does not always end every obligation. Many NDAs keep confidentiality for trade secrets as long as they remain secret, and ownership of the design never passed to the shop. Treat expired-NDA files as still restricted unless counsel confirms otherwise.
Can we upload RFQ files to an AI quoting tool?
Check two sets of terms first: the customer's NDA or RFQ terms, and the tool vendor's terms on storing and reusing uploaded files. Some customer terms forbid sending files to outside services at all. Using customer models to train a model generally needs written permission, even when quoting from them is allowed.
Can we show a customer's part in our marketing?
Only with permission. Photos and models of a customer's part can reveal its design and the relationship itself, which many customers treat as confidential. Ask in writing, and keep the approval with the file.
Sources
- Under 18 U.S.C. 1839(3), information qualifies as a trade secret only if the owner has taken reasonable measures to keep it secret and it derives independent economic value from not being generally known. Source
- Copyright Office Circular 30 explains a work made for hire arises when an employee creates the work within regular duties, or when a work in certain statutory categories is specially commissioned under an express written agreement. Source
- 22 CFR 120.33(a)(1) defines ITAR technical data to include information required for the design, production or manufacture of defense articles, including blueprints, drawings and plans. Source
Related resources
- QuestionShould companies sell or license their data?
- QuestionDo AI labs buy legal documents?
- InsightOpt-in vs opt-out for AI training in B2B SaaS contracts
- InsightCan a distributor license its pricing and quote history?
- InsightDoes AIA B101 let an architect license project records for AI?
- SolutionWhat is AI evaluation data?
See if your company qualifies
A short company assessment. No data uploads are needed.