What is a deal jacket? The complete file of paperwork behind one vehicle sale, the buyer's order, title documents, disclosures, financing paperwork and identity checks for a single transaction, kept together so the deal can be reconstructed years later. It is the first thing an auditor asks for.
What you'll get: the full document checklist by deal type, what each federal rule actually requires and where it comes from, the retention clocks with citations, and an honest comparison of paper versus digital jackets.
Who it's for: independent used-vehicle dealers who want a file that survives a DMV audit, a lender review, or a customer lawsuit three years after delivery.
What goes in a deal jacket, by deal type
The core file barely changes between a cash deal and a note. What changes is how much financing paper rides along.
| Document | Cash deal | Financed | Buy here pay here |
|---|---|---|---|
| Buyer's order or bill of sale | Yes | Yes | Yes |
| Title or reassignment, both sides copied | Yes | Yes | Yes |
| Odometer disclosure statement | Yes | Yes | Yes |
| Copy of the buyer's driver license or ID | Yes | Yes | Yes |
| Signed FTC Buyers Guide | Yes | Yes | Yes |
| OFAC screening result | Yes | Yes | Yes |
| Temp tag or plate record | Yes | Yes | Yes |
| Delivery checklist, signed | Yes | Yes | Yes |
| Form 8300, if cash over $10,000 | If triggered | If triggered | If triggered |
| Trade title plus payoff authorization | If trade | If trade | If trade |
| Retail installment contract | No | Yes | Yes |
| Credit application and credit report | No | Yes | Yes |
| Adverse action or risk-based pricing notice | No | If applicable | If applicable |
| Red Flags identity verification record | No | Yes | Yes |
| Privacy notice acknowledgment | No | Yes | Yes |
| Proof of insurance | No | Yes | Yes |
| GAP, service contract and product agreements | If sold | If sold | If sold |
| Reference sheet and payment schedule | No | No | Yes |
| GPS or starter interrupt disclosure | No | No | If used |
State paperwork sits on top of this. Sales tax forms, damage disclosure statements, power of attorney forms and title applications vary by jurisdiction, and your state agency publishes the list. Get it once, in writing, and build your cover sheet from it.
The federal documents, and what each rule actually says
Dealers repeat these requirements to each other, and the retelling drifts. Here is what the sources say.
The FTC Buyers Guide
The Used Car Rule applies to anyone who sells or offers a used vehicle after selling or offering five or more used vehicles in the previous twelve months. Before you offer a vehicle for sale you must prepare, fill in and display the Buyers Guide on it, prominently and conspicuously, so both sides can be read. Covered systems must be named specifically: the rule says you cannot use shorthand like "drive train" or "power train."
The part that matters after the sale is 16 CFR 455.3: the information on the final version of the window form is incorporated into the contract of sale, and it overrides any contrary provisions in that contract. Your contract also has to tell the buyer so. That is why the signed final Buyers Guide belongs in the jacket rather than in a recycling bin on the lot. It is contract terms. If the sale is conducted in Spanish, the window form and the contract disclosures must be in Spanish too.
Odometer disclosure
Federal odometer disclosure is where the retention rule is unambiguous. Under 49 CFR 580.8, dealers and distributors must retain a copy of each odometer disclosure statement for five years, at their primary place of business, in an order that permits systematic retrieval. Electronic copies are allowed, with a condition worth reading twice: they "shall be retained in a format which cannot be altered and which indicates any attempts to alter it." A scanned PDF sitting in a shared folder anyone can overwrite does not obviously meet that standard.
Not every vehicle needs a disclosure. 49 CFR 580.17 exempts vehicles from model year 2010 and earlier once transferred at least ten years after January 1 of the model year, and vehicles from model year 2011 forward once transferred at least twenty years after. Vehicles over 16,000 pounds GVWR are also exempt. When you are unsure, do the disclosure anyway.
Form 8300 for cash over $10,000
Take more than $10,000 in cash from one buyer, in a single transaction or in related transactions, and you file IRS Form 8300 within 15 days of the transaction. Two obligations ride along and both get missed. You must give every person named on the form a written statement by January 31 of the following year, and you must keep a copy of the filed form for five years. Since January 1, 2024, businesses required to file at least ten information returns of other types in a year have to file Form 8300 electronically, and the IRS is explicit that a confirmation receipt alone does not satisfy the recordkeeping rule. Save the form itself before you submit.
"Related transactions" is the trap. Three $4,000 cash payments toward one car is not three small deals.
OFAC screening
Every US person and US business is prohibited from dealing with parties on the Treasury Department's Specially Designated Nationals list, and there is no dollar threshold and no small-business exemption. Screening the buyer against the SDN list and saving a dated, printable result is a two-minute step that produces the one piece of evidence you cannot recreate later.
Red Flags, privacy, and the Safeguards Rule
If you arrange or provide financing you are a creditor with covered accounts, and 16 CFR 681.1 requires a written Identity Theft Prevention Program approved by your board or an appropriate committee, plus staff training and service-provider oversight. The per-deal artifact is the record that somebody actually ran the identity check.
The Safeguards Rule is the one that changes how the jacket is stored rather than what goes in it. 16 CFR 314.4 requires a designated Qualified Individual, a written risk assessment, access controls, encryption of customer information in transit and at rest, multi-factor authentication for anyone accessing an information system holding customer information, a written incident response plan, and an annual written report. It also sets a disposal obligation: customer information must be securely disposed of no later than two years after the last date it was used, unless it is needed for a legitimate business purpose or required to be retained by law.
How long do you have to keep a deal jacket?
There is no single federal number, which is why the folklore ranges from three years to forever. What exists is a set of separate clocks on separate documents. Two more sit on the financing paperwork: 12 CFR 1026.25 requires a creditor to keep evidence of Truth in Lending compliance for two years, and 12 CFR 1002.12 requires 25 months of records on a consumer credit application, counted from the day you notified the applicant of the action taken. Here is the whole federal set:
The two clocks pull in opposite directions and that is the point. Keeping everything forever is not the safe default it feels like. A drawer of 2009 credit applications is a data breach with a filing cabinet around it, and the Safeguards Rule says to be rid of it. Keeping the statutory documents for their statutory window and destroying the rest on a written, provable schedule is the position that defends in both directions.
State rules sit on top of the federal ones and frequently run longer, especially for title work and dealer license record requirements. Confirm your state's period with the agency that licenses you, in writing, and put the longest applicable number in your policy.
Paper or digital?
Nothing federal requires paper. Odometer disclosures may be kept electronically as long as the copy cannot be altered and shows any attempt to alter it. What a digital jacket changes:
- Completeness becomes visible. A checklist on the deal shows the missing odometer statement before the deal funds, not three years later when it matters.
- Retrieval takes seconds. Auditors and plaintiff attorneys both judge you partly on how fast the file appears.
- Retention runs itself. A destroy-by date on a document is a query. A destroy-by date on a manila folder is a Saturday.
- Access control becomes real. The Safeguards Rule expects encryption, access limits and MFA. A locked drawer with a key on a hook satisfies none of that and logs nothing.
- It cannot be lost. Floods, moves, and the file somebody took home are the ordinary causes of missing jackets, not fraud.
Paper has one honest advantage: a signed original is a signed original, and some state title offices still want wet ink on specific forms. The sane setup is hybrid. Originals that must stay paper live in a locked, indexed cabinet with a retention date on the folder. Everything else is scanned to the deal on the day it happens. Loturn attaches documents to the vehicle and the deal in per-deal document storage, tagged by type with a required-document checklist that blocks a deal from closing incomplete, and the costs that ride along with those documents flow into the per-car profit ledger and the accounting module. Plans and pricing are on the pricing page.
The 60-second audit test
Pick a deal from 18 months ago at random. Start a timer. Can you produce the signed Buyers Guide, both sides of the reassigned title, the odometer disclosure and the OFAC result in under a minute?
If not, the problem is almost never your people. It is that the documents live in five places: a folder in the cabinet, an email attachment, a text message photo, the lender's portal, and somebody's desk. Every document attached to the VIN and the deal it belongs to, at the moment it happens, is the entire fix. There is no clever version of this.
Run the test quarterly, on a deal you pick at random rather than one you choose. If your file clerk gets to pick the deal, you are testing the clerk instead of the system.
Questions dealers ask about deal jackets
Do I have to give the customer a copy of the Buyers Guide?
Give them one and keep a copy. The window form's information is incorporated into the contract of sale and overrides contrary provisions in it, so both parties have a real interest in an identical record of what it said. The rule includes an optional signature line rather than requiring a signature, but use it: a signed final Buyers Guide is the cheapest defense you will ever file against an as-is dispute.
What happens if a document is missing from a jacket?
It depends entirely on which one. A missing insurance binder is an errand. A missing odometer disclosure is a federal recordkeeping failure with a five-year retention rule attached, and a missing Form 8300 is an IRS matter. Regulators tend to treat one gap as an error and a pattern as a program failure, which is why the fix is a required-document checklist rather than a better filing habit.
Does the FTC CARS Rule add anything to my deal jacket?
No. The Combating Auto Retail Scams Rule never took effect. The Fifth Circuit vacated it on January 27, 2025 in the case brought by NADA and the Texas Automobile Dealers Association, on the procedural ground that the FTC had not issued an Advance Notice of Proposed Rulemaking as its own regulations required. Nothing in it applies today, and the underlying prohibitions on deception under the FTC Act still do.
Can I keep the whole deal jacket electronically?
Federally, yes, with conditions. Odometer disclosures must be stored so the copy cannot be altered and any attempt to alter it is evident. Customer information is subject to the Safeguards Rule, meaning encryption at rest and in transit and multi-factor authentication for access. State title offices are the constraint that varies, so confirm which original forms your state requires in paper before you go fully digital.
How long should a buy here pay here dealer keep the file?
Longer, and for a different reason. On a note you carry, the contract stays live for its whole term plus whatever your state allows for collection and deficiency actions afterward, and the payment history is part of the file. Set the retention clock from the date of final payment or charge-off rather than the date of sale, then apply the federal floors on top.
Who should own the deal jacket in a small store?
One named person, with a written checklist, and a second person who spot-checks. The failure mode in a small dealership is not dishonesty. It is that the person selling the car is also the person filing the paperwork, at 6:40 on a Friday, and something gets set down. Name the owner of the file, give them a list, and give them the authority to hold a delivery until the list is done.