RISCClear — Buy-Here-Pay-Here Deal Compliance Completeness Desk

Done-for-you, per-deal compliance completeness review for small independent and buy-here-pay-here (BHPH) used-car dealers who originate their own in-house retail installment contracts. AI extracts and cross-checks every deal-jacket field against federal (TILA/Reg Z, ECOA, FCRA, MLA, Red Flags Rule, GLBA Safeguards Rule) and state (motor vehicle sales finance licensing, usury caps, GPS/starter-interrupt disclosure, repossession notice) requirements; a trained compliance operations specialist RELEASES a signed-off Deal Completeness Pack before the contract is booked. Never legal advice. Never a lending decision. Never a customer-operated software login. Never hourly.

Final decision: Blueprint

Proceed with blueprint. RISCClear clears the evidence threshold: a named buyer (small independent and BHPH used-car dealers who self-finance), a painful and specific problem (a fragmented, deal-by-deal compliance burden across TILA/Reg Z math, ECOA/FCRA adverse-action notices, the Military Lending Act, the FTC Safeguards Rule, Red Flags Rule identity-theft prevention, and a growing state-by-state patchwork of usury, licensing, GPS/starter-interrupt-disclosure, and junk-fee rules), verified active federal and state enforcement (CFPB consent orders up to $6.5M against a single BHPH operator; FTC warning letters to 97 dealer groups in March 2026; a widening set of state junk-fee statutes filling the gap left when the Fifth Circuit vacated the FTC's CARS Rule), existing budget already spent on compliance vendors serving larger franchise groups (KPA, ComplyAuto, Dealertrack), a narrow one-feature MVP (a Deal Jacket Red-Flag Gap Scan), and a licensing-safe documentation/operations desk that never gives legal advice, never makes credit decisions, and never asks a one-to-three-lot dealer to operate software they don't have staff to run. Manifest duplicate check against 503 restored runs found zero prior blueprints targeting independent/BHPH used-car dealer finance-deal compliance.

Executive summary

Small independent and buy-here-pay-here dealers sell roughly 9.8 million vehicles a year and, unlike franchise stores, often originate and hold their own retail installment sale contracts (RISCs) rather than selling paper to a bank. That makes each dealer its own creditor, servicer, and (in many states) licensed sales-finance company — with zero in-house compliance staff. Every deal carries federal exposure (Truth in Lending Act/Reg Z APR and finance-charge tolerance, Equal Credit Opportunity Act adverse-action notices, Fair Credit Reporting Act risk-based-pricing and adverse-action rules, the Military Lending Act's covered-borrower check, the FTC's Safeguards Rule for information security, and the Red Flags Rule for identity-theft prevention) layered under a patchwork of state rules that keeps getting more complex: state motor vehicle sales-finance licensing and usury caps, state-specific GPS/starter-interrupt-device disclosure statutes (Nevada, Oklahoma, and a growing list of others), state repossession notice and right-to-cure requirements, and — since the Fifth Circuit struck down the FTC's federal "CARS Rule" in January 2025 and the FTC formally withdrew it in February 2026 — a fast-expanding wave of state junk-fee and pricing-disclosure laws (New York, Massachusetts, and more) that dealers must now track state-by-state instead of under one federal rule. The FTC has not gone quiet: it sent deceptive-pricing warning letters to 97 auto dealership groups in March 2026 under its existing Section 5 authority, and the CFPB has entered consent orders against BHPH dealers directly, including a $6.5 million FCRA/CFPA order.

RISCClear sells the outcome: a human-released Deal Completeness Pack per contract — RISC math verified against Reg Z tolerances, required federal and state disclosures confirmed present and correctly worded, MLA covered-borrower and OFAC screening documented, Red Flags identity-theft checklist completed, adverse-action notice drafted when a co-buyer or trade financing is declined — plus an optional monthly Compliance Desk retainer that tracks state-law changes, manages license renewals, and keeps a standing self-audit binder ready for a state examiner or CFPB inquiry. Dealers do not log into software; they text or upload photos of a deal jacket and get back a PASS/GAP/HOLD packet before the customer drives off the lot. Pricing is per-deal and monthly retainer — never hourly, never a guarantee against enforcement, and never legal representation.

Thesis

As frontier models get better at reading messy scanned deal jackets — handwritten RISCs, buyer applications, insurance binders, trade titles, GPS install stickers — the cost of a reliable, human-released compliance RELEASE keeps falling while accuracy keeps rising. The moat is not "an AI that explains Reg Z" — every general model can already do that. The moat is an operations product built for dealers who have never had a compliance department: a structured intake that works over text and email, a deterministic rule engine that hard-gates APR/finance-charge tolerance and required disclosures per state, a live state-law-change monitor that updates the rule set as GPS-disclosure and junk-fee statutes spread, and a specialist who will not mark a deal COVERED when the MLA check is missing. Dealers already pay for DMS software, F&I training, and — at the larger end — compliance consultants. RISCClear captures the much larger population of one-to-five-lot BHPH operators that the enterprise consultants don't call on and that self-serve compliance software assumes has a staff member to run it.

Discovery rationale

This run intentionally steered away from the saturated regulatory-filing-engine pattern that dominates the restored manifest (500+ prior runs, heavily weighted toward tax/healthcare/customs "compliance engines") and away from categories already well covered (construction, HR/benefits, real estate, hospitality, customs/trade). Fresh research swept consumer financial services, logistics, and education administration — three of the most underexplored search-terrain categories in the manifest (10, 27, and 18 hits respectively out of 503 runs). Five candidates were generated and scored; independent/BHPH used-car dealer finance-deal compliance won on active enforcement evidence, a large and specific underserved buyer segment, zero manifest overlap, and a clean licensing boundary. School-based Medicaid billing recovery was rejected for crowded, well-capitalized incumbents (Public Consulting Group/Fairbanks LLC, Frontline Education, Go Solutions, EDMS) that already own the RMTS/cost-report workflow. Independent-practice GPO rebate capture was rejected for thin differentiation against existing GPO brands that already market directly to the same buyers. Merchant cash advance UCC-lien-stacking defense was rejected as a fatal disqualifier — it edges into debt-adjusting/settlement activity regulated (and in some states prohibited for non-attorneys) at the state level. Freight-broker carrier-onboarding compliance was rejected as too adjacent to two entries already in the manifest (an FMCSA/DOT compliance engine and a carrier-identity-fraud-risk desk).

Candidate comparison

Scoring dimensions (1–5 each, 20 dimensions, sum/100): low trust burden; low task-level judgment; high intelligence threshold; regulation as moat; no physical labor; Sam Altman test; outcome-pricing potential; gross-margin potential; buyer urgency; competitive whitespace; novelty vs. prior manifest entries; fit with current AI capabilities; active demand evidence; existing budget/competitor proof; waitlist/lead-magnet potential; narrow MVP wedge clarity; distribution-channel clarity; licensing feasibility; operational repeatability; speed to first revenue.

RISCClear dimension scores: 4,4,4,5,5,5,4,4,5,5,5,4,4,4,4,5,4,4,4,4 = 86.

CODE validation

• Consumer/buyer trend: BHPH and small independent dealers remain a large, fragmented, mostly local segment (independents sold 9.8M+ vehicles in 2025); federal auto-finance enforcement is intensifying again after a 2025 pause, and state legislatures are filling the gap left by the vacated federal CARS Rule with their own junk-fee and pricing-disclosure statutes. Verified
• Opportunity: BHPH dealers who hold their own paper are simultaneously creditor, servicer, and (in most states) a licensed sales-finance company, but almost none have a compliance officer; existing vendors (KPA, ComplyAuto, Dealertrack F&I compliance) are priced and positioned for franchise dealer groups, not one-to-five-lot independents. Inferred
• Demand: CFPB has entered consent orders directly against BHPH dealers (including a $6.5M FCRA/CFPA order and the CFPB's first standalone BHPH enforcement action); the FTC sent deceptive-pricing warning letters to 97 dealer groups in March 2026; NCLC maintains an active BHPH litigation/consumer-harm tracking page; state legislatures (New York, Massachusetts, and others) are actively passing new junk-fee and disclosure statutes through 2025–2026. Verified
• Economic sizing: Beachhead ≈ the subset of the ~26,500 US used-car dealerships that self-finance in-house — commonly estimated in the low tens of thousands nationally across BHPH-focused trade coverage, though no single authoritative BHPH-only count exists. If 300 dealer operators buy a $900–$3,500/mo Compliance Desk (avg $1,800) → ~$6.5M ARR from the Desk alone, before per-deal pack revenue from non-Desk dealers. Range uncertain — bottoms-up beachhead preferred over top-down TAM. Inferred

Rubric scorecard (six gates)

Anti-commoditization: A general model can already explain the Military Lending Act. It will not maintain a live, state-by-state GPS/starter-interrupt and junk-fee statute library, refuse to RELEASE a deal with a missing MLA check, or stand behind a signed completeness log a dealer can hand to an examiner. RISCClear owns the deal-by-deal operations layer and the audit trail, not the explanation.

Target buyer

ICP: Independent used-car dealers operating 1–5 lots who originate and hold their own in-house retail installment contracts (true BHPH / "in-house financing"), typically 15–150 vehicle deals per month, with no dedicated compliance officer and no in-house counsel.

Economic buyer: Dealer principal / owner-operator (often also the primary F&I signer).

Champion: Office manager, title clerk, or F&I person who assembles the deal jacket.

Beachhead geography: States with both a large BHPH population and active recent legislative/enforcement attention — Texas, Georgia, North Carolina, Ohio, Florida — plus states with newer GPS/starter-interrupt or junk-fee statutes (Nevada, Oklahoma, New York, Massachusetts) where a dealer's existing playbook is most likely already out of date.

Trigger events: A CFPB or state AG inquiry letter; a new GPS/starter-interrupt or junk-fee statute taking effect in the dealer's state; a state motor-vehicle sales-finance license renewal; onboarding a new F&I hire with no compliance training; a competitor's public enforcement action circulating in dealer trade groups.

Jobs-to-Be-Done

• When I book a deal, make sure every required federal and state disclosure is in the jacket and correctly calculated before the customer signs — not after a regulator asks.
• When a new state law changes GPS-disclosure, usury, or junk-fee rules, tell me exactly what changes in my paperwork without me reading the statute myself.
• When I decline a co-buyer or charge a different rate based on credit, generate the adverse-action / risk-based-pricing notice correctly so I'm not exposed on ECOA/FCRA.
• When my state license is up for renewal or an examiner calls, hand me a ready self-audit binder instead of scrambling through file cabinets.

Painful problem

A BHPH dealer who holds its own paper is, in practice, a small unlicensed-feeling finance company operating under some of the same rules as a bank — without a bank's compliance department. Every deal stacks federal RISC math and disclosure requirements on top of a state layer that keeps shifting: since the Fifth Circuit vacated the FTC's national CARS Rule in January 2025 (formally withdrawn by the FTC in February 2026), states have been passing their own junk-fee and pricing-disclosure statutes one at a time, so a dealer near a state line, or one selling in multiple states, now needs a different playbook per state instead of one federal rule. GPS/starter-interrupt device disclosure is a similar patchwork — several states (Nevada, Oklahoma, and a growing list tracked by NCSL) require specific consumer notice language that a dealer using a stock RISC template often lacks. Miss the Military Lending Act covered-borrower check on a single deal, miss a Red Flags Rule step, or get the APR outside Reg Z tolerance, and the dealer has one bad file — miss it consistently across hundreds of deals and it becomes the pattern regulators build a consent order around, as CFPB's $6.5 million FCRA/CFPA action against a single BHPH dealer and affiliate shows.

The outcome we sell

Specialist-released Deal Completeness Pack per contract (field-by-field RISC verification, required-disclosure checklist by state, MLA/OFAC screening confirmation, Red Flags identity-theft checklist, adverse-action notice draft when applicable, PASS/GAP/HOLD status) plus an optional Compliance Desk retainer (state-law-change monitoring, license renewal tracking, quarterly self-audit binder, new-hire F&I onboarding checklist). Done-for-you. The dealer remains the creditor of record and makes every lending decision; RISCClear never originates, services, or advises on a loan, and never claims to guarantee immunity from enforcement.

First one-feature MVP wedge

Evidence summary

• ~26,500 used-car dealerships in the US; independents dominate the non-franchise tier. Verified
• Independent used-vehicle retail sales topped 9.8 million units in 2025 (NIADA Used Car Industry Report / Dashboard). Verified
• CFPB has taken direct enforcement action against BHPH dealers, including a $6.5 million FCRA/CFPA consent order against a dealer and its affiliate. Verified
• FTC sent deceptive-pricing warning letters to 97 auto dealership groups in March 2026 under existing Section 5 authority. Verified
• The Fifth Circuit vacated the FTC's federal CARS Rule in January 2025; the FTC formally withdrew the rule in February 2026, and states (New York, Massachusetts, and others) have since been passing their own junk-fee/pricing-disclosure statutes. Verified
• Several states (Nevada, Oklahoma, and others tracked by NCSL) require specific consumer disclosure for GPS/starter-interrupt devices commonly used by BHPH dealers to manage repossession risk. Verified
• The Military Lending Act requires a covered-borrower check before extending consumer credit to active-duty servicemembers and dependents, with specific mandatory disclosures. Verified
• Existing compliance vendors (KPA, ComplyAuto, Dealertrack) sell F&I compliance software and consulting, but marketing and partnership patterns (e.g., KPA's Reynolds and Reynolds partnership) skew toward larger franchise dealer groups. Inferred
• Total count of dealers that specifically self-finance in-house (true BHPH) as opposed to selling paper to a bank is not centrally published; estimates vary by source. Unverified
• Willingness of a 1–2 lot BHPH operator to pay $900+/month for a compliance desk versus doing nothing until a letter arrives is a reasonable inference from enforcement evidence but not directly survey-confirmed. Unverified

Claim table

Source-claim matrix

Market and demand evidence

Demand shows up as enforcement and legislative activity, not as a search-trend spike. The CFPB has entered consent orders directly against BHPH dealers — including a $6.5 million FCRA/CFPA action against a single dealer and its affiliate — and has publicly flagged wrongful-repossession and loan-servicing failures as an active auto-finance priority. The FTC, after losing its national CARS Rule at the Fifth Circuit, has not stepped back: it sent deceptive-pricing warning letters to 97 dealer groups in March 2026 using its existing unfair-and-deceptive-practices authority. Meanwhile state legislatures are filling the CARS Rule vacuum one statute at a time — New York and Massachusetts both moved on junk-fee and pricing-disclosure rules in 2025, a pattern legal trackers describe as an "expanding patchwork" dealers must now follow state-by-state. NIADA's own Certified Master Dealer curriculum teaches general dealer operations but is not a substitute for deal-level compliance review — confirming the gap is operational, not educational.

Active buyer conversations

• Legal and compliance trade press (Wiley, Nelson Mullins, Holland & Knight, Consumer Finance Monitor) actively publishing "what changed" alerts as states pass post-CARS-Rule junk-fee statutes.
• NCLC's dedicated BHPH tracking page cataloging consumer-harm litigation and enforcement patterns specific to this dealer segment.
• Dealer-facing trade publications (F&I and Showroom, CBT News, Auto Remarketing's BHPH vertical) covering FTC/CFPB enforcement and state GPS-disclosure law changes as recurring beats.
• Compliance vendors (KPA, ComplyAuto) publishing "deal jacket audit" educational content aimed at dealer groups — confirming the workflow is recognized as valuable, even though their commercial focus skews toward larger franchise operations Inferred.

Competitive landscape

Competitor and budget validation

Existing budget sources: (1) DMS software subscriptions that already include basic compliance modules for larger operators; (2) F&I training and certification fees (NIADA and state association courses); (3) episodic legal spend when a demand letter, state inquiry, or CFPB matter arrives; (4) insurance/E&O premiums that reflect compliance risk pricing.

Why alternatives are insufficient: KPA and Dealertrack are built and priced for franchise dealer groups with existing compliance headcount. ComplyAuto's DealCheck AI is a self-serve tool — exactly the "customer-operated co-pilot" pattern this business avoids — and still requires someone at the dealership to run it, review flags, and know what to do next. Hourly consultants are reactive and expensive per touch. RISCClear redirects the same category of spend (compliance risk mitigation) into a done-for-you, per-deal desk sized for the operator who has never had a compliance hire.

Pricing evidence and proposed pricing

Never hourly. No contingency, refund-share, or recovered-dollar pricing is used anywhere in this model — RISCClear does not recover money for the dealer or the consumer, so contingency-fee legality analysis is not applicable; all pricing is flat per-deal or a flat monthly retainer.

Regulatory and compliance considerations

• Truth in Lending Act / Regulation Z — APR and finance-charge tolerance, required disclosures on retail installment contracts.
• Equal Credit Opportunity Act (ECOA) / Regulation B — adverse-action notice requirements when credit is declined or terms differ from those requested.
• Fair Credit Reporting Act (FCRA) — risk-based-pricing and adverse-action notice requirements tied to credit report use.
• Military Lending Act (MLA) — covered-borrower check and specific disclosure/rate-cap requirements for active-duty servicemembers and dependents.
• FTC Safeguards Rule (GLBA) — written information security program requirements, explicitly applicable to auto dealers who extend credit.
• FTC Red Flags Rule — written identity-theft prevention program.
• State motor vehicle sales-finance / installment seller licensing — varies by state; many require a separate license to originate RISCs in-house.
• State usury caps and disclosure statutes — vary by state; several states specifically regulate GPS/starter-interrupt device use and disclosure.
• State junk-fee / pricing-disclosure statutes — a growing, state-by-state body of law following the vacatur of the FTC's federal CARS Rule.
• RISCClear is an operations and documentation desk, not a law firm, not a lender, and not a credit-repair or debt-collection business. It never makes a lending decision and never represents a dealer before a regulator; adversarial matters route to outside counsel.

Licensing boundary

Disclaimers: A PASS status means the reviewed fields met the documented rule set at time of review — it is not a legal opinion and does not guarantee regulatory outcomes. The dealer remains the creditor, servicer, and licensee of record on every deal. Any state inquiry, subpoena, or CFPB matter is routed immediately to the dealer's own or a partner compliance attorney; RISCClear does not respond to regulators on the dealer's behalf.

AI-native advantage

AI changes the unit economics by: (1) extracting structured fields from photographed or scanned deal jackets, including handwritten entries; (2) recomputing APR and finance-charge tolerance checks against the RISC math instantly; (3) matching each deal's state and product features (GPS device, add-on products, co-signer) against a continuously updated state rule library; (4) running MLA covered-borrower and OFAC screening logic; (5) drafting adverse-action notice language for human review; (6) tracking every open state license renewal date. Humans change only at RELEASE, ambiguous edge-case judgment, and any regulator-facing matter. Better models make each deal cheaper to review, not a chatbot the dealer has to operate.

Internal AI engine architecture (10 layers)

1. Intake: Text/email/portal upload of deal-jacket photos or scans, deal metadata (state, deal type, add-ons).
2. Normalization: OCR + field extraction; entity resolution (buyer, co-buyer, vehicle, lot location).
3. Retrieval/knowledge: Federal rule set (TILA/Reg Z, ECOA, FCRA, MLA, Safeguards, Red Flags) + state-by-state licensing, usury, GPS/SI, and junk-fee rule library + prior gold-standard packs.
4. AI workbench: RISC math verification, disclosure-presence check, MLA/OFAC screening, draft adverse-action notice, draft chase list for missing items.
5. Deterministic rules: Hard gates — APR outside Reg Z tolerance = FAIL; missing state-required GPS/SI disclosure = GAP; expired sales-finance license = HOLD; missing MLA check = HOLD.
6. Human chokepoint: Compliance ops specialist RELEASE with PASS / GAP / HOLD.
7. QA: Second-pass review on any HOLD, any MLA-flagged deal, and a rolling sample of PASS packs.
8. Delivery: Text/email PDF pack + running self-audit binder + renewal calendar.
9. Learning loop: Any state law change or examiner finding becomes a new rule-library entry and questionnaire field.
10. Model-portability: Extraction and rule-check prompts abstracted from any single model vendor so the rule library survives model swaps.

AI-vs-human operations pipeline

Dynasty translation layer

• Buyer: BHPH dealer principal paying to avoid a CFPB/state enforcement letter and to keep in-house financing legally sound.
• Service: DFY Deal Completeness Pack + Compliance Desk; dealer receives PASS/GAP/HOLD packets and a self-audit binder.
• Workflow: Intake → extract → gate → RELEASE → dealer books or corrects the deal → monitor law changes and renewals.
• Tooling: Secure upload (text/email/portal), OCR/LLM extraction, spreadsheet/Airtable rule library and ops database, e-sign for client-approved templates, calendar for renewals.
• Sales: "We check every deal jacket against federal and your state's rules before you book it — so the next CFPB letter isn't about you."
• Delivery: Manual specialist desk first; automate extraction and state-law monitoring as volume grows.
• Expansion: Related dealer categories (independent RV dealers, powersports BHPH), F&I new-hire onboarding packs, dealer-association group deals.

Anti-duplication analysis

Checked the restored manifest.json (503 runs) and root *-blueprint.html filenames by both keyword and semantic similarity. No prior blueprint targets independent/BHPH used-car dealer finance-deal compliance, RISC documentation, or any auto-finance consumer-lending workflow. The manifest's existing FMCSA/DOT compliance engine and carrier-identity-fraud desk are trucking/freight-carrier businesses — a different buyer, workflow, and outcome entirely. Distinct from generic "auto dealer compliance software" (this is a done-for-you desk, not a tool the dealer operates) and from the debt-collection/credit-repair space (RISCClear never collects debt or repairs credit).

Anti-commoditization analysis

ComplyAuto's DealCheck AI proves that AI-assisted deal-jacket review is a real, buildable capability — and is the single closest existing competitor. RISCClear does not compete by building a better self-serve tool; it wins by selling the outcome a 1–5 lot BHPH dealer actually wants and can't get elsewhere: zero software to learn, a human specialist who signs off on every deal, a continuously updated state rule library maintained by the vendor (not the dealer), and a standing audit trail built for the exact moment a regulator calls. If future models make the extraction step fully commoditized and free, RISCClear still owns: (1) the state-by-state rule-change monitoring service; (2) the human RELEASE and liability-conscious sign-off; (3) the audit-trail/binder product; (4) the license-renewal management layer; (5) the relationship and trust built through the pilot cohort. Commoditized extraction becomes an input cost that falls, not a competitor.

Service delivery workflow

1. Scoped intake call; dealer confirms states of operation and product features (GPS, add-ons, co-signers typical).
2. Dealer texts or uploads photos/scans of deal jacket per contract, or a batch for the initial Gap Scan.
3. AI extraction + rule-engine scoring against the current federal + state rule library.
4. Exception chase list generated for missing or ambiguous items.
5. Specialist RELEASE with PASS / GAP / HOLD and specific corrective guidance.
6. Dealer corrects the deal jacket or acknowledges residual GAP with a documented reason.
7. Pack and audit-trail entry filed to the dealer's running self-audit binder.
8. Optional Desk: monthly state-law-change bulletin + license renewal tracking + quarterly binder refresh.

Operations as product

SOPs for intake evidence lists (what a complete deal jacket must contain per state), the federal + state rule taxonomy, hard-gate definitions, exception-queue routing, RELEASE checklist, regulator-contact routing to counsel, and a postmortem process whenever a state law changes or an examiner finding surfaces a gap in the rule library. Versioned gold-standard packs per state. Confidence scores on OCR-extracted fields below a threshold trigger mandatory human review. Full audit trail of every RELEASE, every rule-library update, and every dealer acknowledgment of a residual GAP.

No-holes quality engine

• Completeness check: every reviewed deal has a scored row for each required federal and state item.
• Hard fail: any deal with an APR outside published Reg Z tolerance, or a missing MLA check, cannot be marked PASS.
• State rule-library review triggered immediately on any legislative or regulatory change alert (manual monitoring at launch; automated alerting added by day 90).
• Dual control: 100% second-pass QA on any HOLD or MLA-flagged deal; 20% rolling sample of routine PASS packs at scale.
• Red-team: quarterly "mystery deal jacket" internal audit against the current rule library to catch drift.

What the human expert actually does

Minimum viable offer

Deal Jacket Red-Flag Gap Scan on 10 recent deals in 5 business days for $499 (or free for the first 1 deal as a teaser). Includes a PASS/GAP/HOLD scorecard and a plain-language explanation of every GAP. Upsell: Compliance Desk retainer starting at $900/mo for dealers under 40 deals/month.

Fulfillment process (first 3 customers)

1. Founder + 1 contractor compliance specialist (paralegal-level background preferred, not a licensed attorney).
2. Tools: secure shared drive or simple upload form, spreadsheet/Airtable rule library, Claude/GPT for extraction, e-sign, Stripe invoicing.
3. Manual review and phone/Zoom walkthrough of the first packs with each dealer.
4. Do not auto-send any adverse-action notice to a consumer; drafts always route through the dealer.
5. After 5 dealer engagements, templatize the state-by-state questionnaire and gold-standard pack library.

Tools and systems

Day-one: secure upload form or shared drive, Airtable/spreadsheet ops database and rule library, e-sign for dealer-approved templates, Stripe invoicing, calendar for license renewals, a retained compliance-attorney relationship for escalations. Later: a lightweight client portal, an automated OCR/extraction pipeline, automated legislative-change alerting, and API-based OFAC list checking.

Human-in-the-loop quality control

No pack is delivered without a specialist RELEASE. Any deal missing an MLA check or with an APR outside Reg Z tolerance is a hard HOLD that cannot be overridden without documented dealer acknowledgment. Any regulator or examiner contact auto-routes to the compliance-attorney relationship — RISCClear never responds to a regulator on the dealer's behalf. Dealers must attest that submitted documents are complete and accurate; residual UNKNOWN items are explicitly logged, never silently assumed PASS.

Nonlinear scaling and unit economics

Path to 50%+ GM: templatize the state rule library so new-state onboarding is mostly configuration, cut specialist minutes with better extraction confidence scoring, and keep the compliance-attorney relationship on a referral basis rather than in-house payroll.

Distribution proof table

Sales and outreach plan

Lead with a free single-deal diagnosis, not a software demo. Show the dealer their own scorecard live. Scope the MVO (10-deal Gap Scan) immediately after. For dealers who already received a state or CFPB inquiry, open with the Exam/Inquiry Readiness Binder plus an immediate Gap Scan on current inventory of open deals. Plain-language pitch: "We check every deal jacket against federal and your state's rules before you book it — so the next letter isn't about you."

Founder-led content plan

Teach the exact pain: what changed when the CARS Rule was vacated, why "one federal rule" became "50 state rules," what a GPS-disclosure statute actually requires, what the MLA covered-borrower check catches, what a real CFPB consent order cost a BHPH dealer, and what a self-audit binder should contain before an examiner asks for one. No generic "AI for auto dealers" content.

First 30 days of content

1. Post: "The CARS Rule is dead — here's what replaced it in your state."
2. Post: What a $6.5M CFPB order against a BHPH dealer actually alleged.
3. Post: The GPS/starter-interrupt disclosure states you're probably missing.
4. Post: MLA covered-borrower check — the 60-second step that gets skipped.
5. Post: Reg Z APR tolerance, explained without the statute language.
6. Post: What the FTC's 97 warning letters actually said.
7. Post: Red Flags Rule — the identity-theft checklist most 1-lot dealers don't have.
8. Post: Building a self-audit binder before an examiner asks for one.
9. Post: Adverse-action notices — when you owe one and what it must say.
10. Post: State-by-state junk-fee law tracker — updated monthly.
11. Teardown: Public CFPB consent order, deal-file style walkthrough.
12. Teardown: A real (anonymized) Gap Scan result — GAP counts and fixes.
13. Teardown: One state's GPS-disclosure statute, line by line.
14. Lead magnet: 1-page Deal Jacket Completeness Checklist.
15. Lead magnet: State GPS/Starter-Interrupt Disclosure Requirement Map.
16. Webinar: Live review of an anonymized 10-deal Gap Scan.
17. Outbound template: diagnosis memo naming the 3 most likely gaps for that dealer's state.

Lead magnet and waitlist plan

Lead magnet: Free Deal Jacket Completeness Checklist + State GPS/Starter-Interrupt Disclosure Map (instant download) → optional free 1-deal Gap Scan.

Waitlist CTA: "Get on the RISCClear Desk waitlist — the first 10 dealers get their Gap Scan fee credited to month one of the Desk."

Before paying: Checklist + free 1-deal scan summary (PASS/GAP/HOLD only, no line-item detail until paid).

Sales-ready signal: Any HOLD result, or any dealer who mentions a recent state or CFPB inquiry letter.

Warm GTM plan

Convert checklist downloaders and compliance-attorney referrals into Gap Scans. Offer the scan fee credited toward the first Desk month. Host one private roundtable with 8–10 BHPH operators from a single state association chapter to pressure-test the pricing and pain framing.

Targeted outbound plan

Build a list from state independent-dealer association directories and public dealer license rosters, filtered toward operators who advertise "in-house financing" or "buy here pay here." Personalize around: (a) the dealer's state's specific GPS-disclosure or junk-fee statute, (b) an upcoming license renewal date if publicly known, or (c) a recent public enforcement action in their state. Send a 6-line diagnosis memo naming the 3 most likely gaps plus the free Gap Scan offer. No generic "AI compliance" spam.

Answer-engine / search visibility plan

Target queries: "buy here pay here compliance checklist," "CFPB BHPH enforcement," "GPS disclosure law used car dealer," "Military Lending Act auto dealer," "CARS Rule replaced by state law." Publish citation-backed explainers with Gap Scan CTAs. Structure content as clear FAQs so it surfaces in AI-generated overviews as well as traditional search.

Pilot design and early-demand-trap mitigation

• Pilot cap: 5 dealer clients (≤75 deals/month each).
• Incentive: 30% off the first 90 days of the Desk in exchange for a monthly batch upload of all new deals plus feedback on the rule library.
• Feedback vs. custom: A missing state rule or taxonomy gap → rule-library update; a one-off request to represent the dealer in a regulator matter → out of scope, routed to counsel.
• Mitigation: Do not accept "just check the APR math" without the full disclosure/MLA/Red-Flags checklist — a partial check recreates the exact false-confidence problem this business exists to prevent.

Early-access feedback flywheel

Every state-law change, examiner finding, or dealer-reported edge case becomes a rule-library entry, a new questionnaire field, or a gold-standard example. Monthly SOP review. Prompt and rule-library versioning with a changelog. Public, anonymized "gap of the month" content drawn from aggregated, de-identified patterns (no dealer or deal identifiers).

Build-before-scale checkpoints

• After 5 pilots: Harden the intake checklist, the federal + state hard-gate rule set, and the RELEASE rubric.
• After 10 pilots: Harden exception-queue routing, the compliance-attorney escalation playbook, and binder templates.
• After 20 pilots: Pause new pilots until COGS, rework rate, and cycle time are measured; confirm Desk cohort gross margin is at or above 50% before continuing to scale.
• Manual Zoom walkthroughs are acceptable temporarily; quietly skipping the MLA or Red Flags check to save specialist minutes is not — that is the exact failure mode this business is built to prevent.

7 / 30 / 90 day launch plans

7 days: Landing page, checklist + state GPS-disclosure map magnet, one compliance-attorney referral partner LOI, first 50 outbound emails to a single state's independent-dealer list, questionnaire v1, Airtable pipeline.

30 days: 15 Gap Scans delivered, 5 paid Deal Completeness Pack engagements, 2 Desk pilots signed, 10 pieces of educational content published, 1 webinar.

90 days: 8 Desk clients live, per-pack COGS measured, rule library covers at least 5 beachhead states, SOP v3, one compliance-attorney referral channel producing leads, decide scale/pause based on Desk-cohort gross margin.

Metrics and KPIs

• Gap Scans / week; Scan→Pack %; Pack client→Desk %; Desk net revenue retention
• % of deals PASS on first review; HOLD rate; MLA-check completion rate
• Cycle time; rework %; specialist minutes/pack
• State/regulator inquiries handled; counsel handoff SLA
• Gross margin; revenue/FTE; CAC payback

Risks and mitigations

Primary risks: unauthorized-practice-of-law boundary creep; low willingness to pay at the smallest 1-lot dealers; ComplyAuto or a similar vendor extending DealCheck AI downmarket to this exact ICP; state rule-library maintenance burden as more states legislate; dealer resistance to sharing deal-jacket documents with a third party. Detailed mitigations are in the risk register below.

Exhaustive risk register

What could kill this

• Scan→Pack conversion stays below 20% after 40 scans.
• Desk gross margin stays below 45% after 15 Desk-months of real data.
• Inability to hire and train a second RELEASE specialist, creating a founder bottleneck.
• Scope drift into regulator representation or lending-decision involvement.
• A major DMS or compliance vendor bundles a fully done-for-you, human-reviewed version of this exact desk into an existing product BHPH dealers already pay for, at a lower price than RISCClear can sustain.

Go/no-go reasoning

GO. Evidence of active federal enforcement and a fast-expanding state regulatory patchwork, a large and specific underserved buyer segment with no dedicated compliance staff, existing budget spent on adjacent (but poorly fitted) compliance vendors, a clean licensing boundary, zero manifest duplicates, fully remote fulfillment, and a credible path to 50%+ gross margin. The largest residual unknown is exact BHPH-only dealer count and real willingness to pay at the smallest lots — both testable cheaply via the free Gap Scan magnet before any heavier build.

Final recommendation

Launch RISCClear as a documentation-and-operations completeness desk for independent and BHPH used-car dealers who self-finance. Sell the free single-deal Gap Scan and the paid 10-deal batch scan first; attach the Compliance Desk retainer within 30 days for dealers showing repeat GAP or HOLD patterns. Stay licensing-safe at every step — no lending decisions, no regulator representation. Build the compliance-attorney referral relationship early and treat every state law change as a rule-library update, not a one-off. Measure Scan→Pack conversion and Desk-cohort gross margin ruthlessly before scaling past 20 pilots.

Source list

1. CoPilot — Used-car dealership counts by state
2. NIADA — UCIR 2025 independent used sales
3. Lexology — CFPB $6.5M order vs. BHPH dealer and affiliate
4. CFPB newsroom archive — first BHPH enforcement action
5. CFPB newsroom — wrongful repossessions and servicing breakdowns
6. FTC — warning letters to 97 auto dealership groups (March 2026)
7. Holland & Knight — Fifth Circuit strikes down FTC CARS Rule
8. Federal Register — withdrawal of the CARS Rule
9. Wiley — expanding patchwork of state junk-fee laws
10. Nelson Mullins — states regulate new-car sales practices post-CARS-Rule
11. Holland & Knight — Massachusetts junk-fee and subscription law
12. New York State Senate Bill S363A
13. NCSL — private use of location tracking devices, state statutes
14. Auto Remarketing — new Nevada GPS/starter-interrupt law
15. Lexology — Oklahoma GPS and starter-interrupt device law
16. GPS Leaders — BHPH compliance and privacy GPS tracking laws
17. CFPB — Military Lending Act
18. NCUA — Military Lending Act compliance guide
19. FTC — Safeguards Rule FAQ for auto dealers
20. Strolid — 2025 FTC Safeguards Rule guide for auto dealers
21. KPA — F&I compliance services
22. AutoSuccess — KPA and Reynolds and Reynolds F&I compliance partnership
23. ComplyAuto — DealCheck AI
24. ComplyAuto — the critical role of deal jacket audits
25. VantaInsights — used-car dealership profit margins 2026
26. NIADA — Certified Master Dealer program