Process & governance
Controlled stages, documented decisions.
Every engagement moves through defined checkpoints. Nothing is shared until scope and authorization are written down and approved by the data-owning organization.
- 01
Business records
Described at a high level. Nothing uploaded.
- 02
Scoped review
Inventory, restrictions, and sensitive fields mapped.
- 03
Rights & buyer fit
What can be licensed, and to whom.
- 04
Approved opportunity
Only with written scope and authorization.
Five steps
- 1
Start with a conversation
Discuss the company, its operations, systems, record types, time span, and goals. We do not request raw files or credentials.
- 2
Map the opportunity
Build a high-level inventory and identify ownership, access rights, restrictions, sensitive fields, and possible use cases.
- 3
Confirm rights and buyer fit
Assess what the company may be permitted to license and whether a relevant buyer need exists. Any buyer outreach requires the company’s written authorization.
- 4
Scope and negotiate
Define the proposed records, permitted uses, compensation structure, exclusivity, security, retention, and other terms.
- 5
Company reviews and approves
The company reviews and approves the final scope and agreement before any authorized transfer.
Where multiple qualified buyers are confirmed for a specific opportunity, a competitive process may be discussed. Competing bids are not assumed or promised by default.
Owner control
- The company approves what may be included.
- No data is shared before scope and authorization are documented.
- Source-record ownership and license rights are addressed in writing.
- Sensitive fields and third-party restrictions are reviewed.
- The company can decline before any authorized transfer.
- Security and handling controls are defined for each engagement.
Defined by written agreement
Our preferred model is licensing defined rights, not automatically transferring ownership of source records. Final rights, permitted uses, exclusivity, retention, security, and compensation are determined by written agreement.
- Rights licensed and source-record ownership
- Permitted and prohibited uses
- Exclusivity
- Retention and deletion
- Security and handling controls
- Compensation structure
Privacy, security, and handling controls are defined for each engagement based on the records involved and applicable requirements. We do not make blanket compliance or anonymization claims.