Trust & compliance

How we handle rights, privacy and delivery.

This page describes our standard practices. Specific legal terms are set in each agreement.

01PII removal and redaction

Personal information is removed before delivery.

Workplace and operational data contains information about employees, customers and third parties. We treat it accordingly.

Scope: Direct identifiers: names, email addresses, phone numbers, postal addresses, account and government IDs, payment details.
Method: Automated detection, followed by human review of samples. Identifiers are removed or replaced with consistent pseudonyms so structure is preserved.
Exclusions: Categories the seller or buyer excludes, such as HR files, health records or privileged legal material, are removed in full.
Report: Each delivery includes a redaction report describing what was removed and how.

TODO: Name the redaction standard, the review sample rate, and the applicable laws (e.g. GDPR, CCPA, HIPAA where relevant).

02Rights verification and chain of title

Before a listing goes to buyers, we check who owns the data and who can authorise its sale.

Ownership: Confirm the entity that holds the data and the systems it came from.
Authority: Confirm the signer can bind that entity. For closed companies, this may be the board, an assignee or a liquidator.
Third-party terms: Review customer contracts and platform terms that may restrict use of the data.
Chain of title: Document how rights passed to the licensor, and give that summary to the buyer.

TODO: Describe the legal review process and who performs it.

03Licensing terms

Every dataset is licensed under a written agreement. The main terms are negotiated per deal.

Exclusivity: Non-exclusive (licensed to several buyers) or exclusive (one buyer, priced higher).
Scope: Permitted uses, for example pretraining, fine-tuning, RL environments or evaluation, and any restrictions.
Term: Fixed term or perpetual. What happens to the data and derived models when the term ends.
Warranties: Seller representations on ownership and authority. Buyer commitments on use and security.

TODO: Link or summarise the standard license template, governing law and liability terms.

04Secure delivery

Data is never sent as email attachments or through public links.

Encrypted transfer: Encrypted in transit and at rest, delivered to buyer-controlled storage.
Data room: For samples and sensitive datasets, access through a data room with logging.
Access: Limited to named individuals at the buyer, for a defined period.
Retention: Our working copies are deleted after delivery and acceptance.

TODO: Specify encryption standards, the data room provider, and the retention period for working copies.

05Buyer verification

Listing details, samples and deliveries only go to verified organizations.

Identity: Confirm the organization and the individual’s role through a work email and direct contact.
Use: Confirm the intended use matches the license scope.
NDA: Required before company names, samples or detailed documentation are shared.
Seller approval: Sellers can exclude specific buyers or buyer types.

TODO: Describe any additional KYC or security review for buyers.

Nothing on this site is legal advice. Sellers and buyers should consult their own counsel.

For sellers

Send us an inventory. We reply with a written valuation range. There is no obligation to sell.

For AI labs

Verified buyers get listing details, documentation and evaluation samples.