Most owners evaluating a data license have never seen one before. The market is new, the document is unfamiliar, and the person across the table has done this many times. That imbalance is normal in a young market — and it is manageable, because a legitimate license has a recognizable shape. The provisions below are what protect you. A buyer or program that is operating properly will put every one of them in writing without being pushed. Resistance to any of them is information, and you should treat it that way.
The license should name the systems and the years — specifically, in the document, not in a sales conversation. Your CRM for 2019 through 2025 is a scope. "Your company data" is not. The rule that protects you is simple: anything not listed does not move. If the document's scope language is broad, vague, or defined by reference to something you cannot read, that is the first thing to fix — before signature, not after.
Scope is what goes in. Exclusions are what never does — and you should arrive with your own list. Categories owners commonly exclude: HR files, disciplinary and performance records, payroll and compensation data, and anything under a confidentiality obligation to a third party. These are genuinely different in kind from operational records — they are about identifiable people at their most exposed moments — and a process that treats them as interchangeable with workflow records is telling you something about itself. In the process we connect owners to, exclusions are the owner's call, recorded before anything is prepared. Make it yours, and make it written.
"Anonymized" as a bare promise is not enough; you want the method. In a properly run process it reads like this: names, emails, and phone numbers are replaced with placeholders (Person 01, Company A); dates are generalized; card and bank numbers are removed; data relating to minors is removed. Only the cleaning process itself sees the raw copy — the buyer receives the cleaned version. Get the method in the document, in that level of detail. And hold the honest limit in mind: de-identification is a process, not magic — which is exactly why the next provision exists.
This is the provision that converts trust into verification. Before you sign, you should be able to see a cleaned sample of your own records — what the buyer will actually receive, with your own eyes. If the sample still shows things it shouldn't, you have learned that before any commitment. A program that will not show you a sample is asking you to approve a product you haven't seen, and there is no reason to accept that. In the documented process in this market, sample review comes before signature. Treat anything else as a red flag.
Ask two questions. Who, precisely, handles the uncleaned copy? (The defensible answer: the cleaning process only — and in our case, never us; QualifyData does not touch or access owner data at any point.) And when is the raw copy deleted? The deletion should be on a schedule written into the license itself, not handled by a verbal assurance. A document that specifies the schedule can be enforced. A promise cannot.
The license should be non-exclusive: you keep your records, your rights, and your ability to license the same archive again — later years, reopened categories, new buyers. Exclusivity language, or silence that functions as exclusivity, converts a license into something closer to a sale, at a license's price. Read for it specifically.
Licensing your archive does not have to mean advertising it. The agreement should say whether the buyer may use your company's name publicly in connection with the data. In this market, data partners typically agree not to name the owner publicly — but "typically" is not a term. Get it as one, in whichever direction you prefer.
The amount and the payment mechanics belong in the license: what triggers payment, and when it lands. In the documented flow, the owner's team exports the copies over roughly 5 to 10 business days after signing, a review period of about 30 days follows, and payment comes after review — a typical total of 90 to 120 days from signing to money — 60 to 90 for a company that is cooperative and moves fast. Also confirm the negative: your business pays nothing. No fees, no charges for cleaning, no deductions invented later. If a cost appears that was not in the document, the document was not the deal.
Until you sign, nothing has moved and nothing should cost you anything. The inventory, the offer, the sample — all of it precedes commitment, and declining after seeing any of it should end the matter cleanly, at no cost and with no copies retained. If you feel that asking questions is being treated as a commitment, or that time pressure is being applied to shorten your review, that pressure itself is the answer about who you are dealing with.
None of these provisions is exotic. They are what a careful process looks like when it is written down — and a legitimate buyer writes them down willingly, because they protect the buyer too: clean scope and real de-identification are what make the data safe for them to use. The owners who get the best outcomes in this market are not the ones who found the biggest number. They are the ones who read the document as if their company's name were on it — because it is.
When you are ready to see what your archive is worth, the estimator takes about two minutes and shows your range with no email required: qualifydata.com/estimator.html
No cost. No commitment. No logins, no records handed over — just a few questions about the size of your archive.
We never touch or access your data. Not during the intake, not during the export, not ever. Your records go straight from your systems to the AI company you sign with — we are never in that chain.
And your business never pays anything.
Qualify