MarTech Verdict

Reviews · AI data licensing

How to Sell Company Data to AI: 2026 Audit and Licensing Process

How to sell data to AI companies, run as an ops project: data audit, rights review, offers, de-identification spec, license terms and delivery, checked October 25, 2026

By the MarTech Verdict Editorial Team · Updated October 25, 2026

How we put this together: We read the official data partnership, FAQ and terms pages of micro1, Scale AI, Mercor, Handshake AI, Labelbox Prism, Polyshares, Endless Data, Troveo and SimpleClosure AssetHub on October 21, 2026, and re-read most of them on October 25, 2026, when micro1's page had changed. On October 25 we also read Slack's API Terms of Service and its workspace export help page. Press sources are Business Insider, MIT Technology Review and The Next Web, plus Epoch AI's January 12, 2026 interview-based report. We haven't sold data, requested an offer or spoken to these companies for this article. SimpleClosure AssetHub's current wording: Couldn't confirm on October 25, so its figures are from October 21.

Selling company data to AI companies is a licensing project, not a file sale. An ops lead audits which systems hold firm-owned records, clears client, employee and platform rights, collects two or three offers on one written scope, has the buyer de-identify that scope, and delivers only after the license fixes exclusivity, deletion and payment dates.

Payment usually follows delivery and acceptance. On October 25, 2026, micro1 said it pays within 30 days of invoicing once it has approved the data, Polyshares said net 30 to 60 days, and Mercor said its wire typically arrives 2 to 4 weeks after signing. Published offers ranged from $10K to “$4M+”.

Onfolio may earn a referral fee if you sign up to Polyshares through our links. This does not affect our editorial assessment.

This guide is written for the person who would run the project, usually an ops, RevOps or IT lead. Each phase below has an output and a gate, so the project can stop cleanly at any point before data leaves your systems.

The process at a glance

Seven phases, in order. The owner column is our suggestion, not a buyer requirement.

PhaseSuggested ownerOutputGate before the next phase
1. Data auditOps or ITSystem inventory with years and record countsEvery system has a named owner and a count
2. Rights reviewLegal, with opsExclusion list covering clients, people and platformsClient-owned material is tagged
3. Buyer modelOwner or CEOShortlist of 2 to 3 buyersYou know which entity signs and pays
4. Indicative offersOwner, with opsWritten offers on the same scopeOffers compare like for like
5. Scope and de-identification specOps and legalData manifest and anonymization standardYou’ve reviewed a de-identified sample
6. License termsLegal and ownerSigned licenseExclusivity, deletion and payment dates are in writing
7. Delivery and paymentOps or ITTransfer log, acceptance, invoiceAcceptance confirmed in writing

Phase 1: Run the data audit

Count before you export. Buyers price from systems, years and record counts, and the audit is also where you find the client and personal data you’ll need to exclude.

Record typeTypical systemsWhat to countWhy buyers care
Team chatSlack, Teams, Google ChatYears, channels, messages, share in shared client channelsScale AI wants “full conversation histories, threads, participants, and reply structure preserved intact”
Email and calendarGmail, Outlook, CalendarMailboxes, yearsNamed by Scale AI, Mercor, Polyshares and Troveo
Docs and knowledge baseDrive, SharePoint, Confluence, NotionSOPs, playbooks, templates, versionsmicro1 asks for SOPs, knowledge bases and process documentation
Projects and ticketsJira, Asana, Linear, Zendesk, ServiceNowProjects, tickets, yearsNamed by Scale AI and Troveo; Polyshares lists support tickets
CRMSalesforce, HubSpotDeals, activities, notes, yearsmicro1’s William Almeida told Business Insider that without Slack, CRM or email records “the rest of the corpus is less valuable”
Finance and ERPAccounting, ERP, invoicesYears, entitiesNamed by Polyshares and Troveo
Data warehouseBigQuery, Snowflake, DatabricksTables, yearsNamed by Scale AI and Troveo
Code and designGitHub, FigmaRepositories, filesMercor names GitHub; SimpleClosure AssetHub handles source code and Figma

For each system, also record the date of the first record, active users over time, the share of content in English, and whether client material sits in the same place. micro1 and Endless Data both want mainly English documentation, and micro1 says several years of records across multiple systems is “a stronger fit.” Mercor says connecting more tools generally raises the payout.

Slack is the system most buyers ask about, and your plan limits what an admin can export. From Slack’s help center, read October 25, 2026:

Slack planWhat admins can export
FreePublic channels, with file links from the last 90 days only
ProPublic channels
Business+Public channels; private channels and DMs only after Workspace Owners apply for a self-serve export tool, which Slack frames as “for legal and regulatory compliance”
EnterpriseCustom exports by conversation type, member or workspace, after Org Owners request access

Slack exports contain messages and file links, not the files themselves, so files sit in a separate step.

Phase 2: Clear rights and write the exclusion list

Tag everything your firm doesn’t own or can’t strip of people, and write it down as an exclusion list. It goes into every offer request and, later, into the license.

ExcludeWhere it hidesRule or source
Client deliverables and client filesShared drives, client folders, project toolsPolyshares’ license “does not cover what you hold on behalf of your own clients”; RICHT law firm (October 18, 2026) notes many agency contracts carry a “no client data used to train AI” warranty
Shared client channelsSlack Connect, shared Teams channelsClient-owned conversations, with the client’s own people in them
Contact-level CRM dataContacts, email signaturesCCPA/CPRA has covered B2B contact and employee data since January 1, 2023
HR and payrollHR systems, payroll, performance reviewsExcluded by default at Labelbox Prism, Endless Data and SimpleClosure
Employee talk about pay and conditionsChat, emailProtected under NLRA Section 7
Recorded callsCall recorders, sales toolsState consent rules; Brewer v. Otter.ai (August 2025) alleges wiretap violations
Credentials and secretsCode, tickets, chatSimpleClosure (October 1, 2026) flags live credentials
Third-party licensed data and open-source codeWarehouse, repositoriesGoverned by someone else’s license terms
Regulated contentHealth records, privileged legal mattersEndless Data never licenses protected health information or privileged client matter content

Platform terms need their own check. Under Slack’s API terms (effective October 10, 2025, read October 25, 2026), an app offered to other organizations may not “use API Data to train a large language model,” may not bulk export message and file data unless an additional agreement allows it, and may not use data from one organization to benefit a different one. That clause covers app providers, which is what a buyer’s connector is. It doesn’t settle whether your own admin export can be licensed, so read your Slack customer agreement as well. Google Workspace API policies restrict using data to train non-personalized models, and the FTC said in February 2024 that retroactively changing privacy terms to allow AI training can be deceptive.

Phase 3: Choose a buyer model

Pick the model by how you want to be paid and where you want de-identification to happen. Direct buyers pay a fixed fee, agents and marketplaces take a cut, and revenue-share programs pay as your data is licensed.

ModelExamplesHow data leaves your systems, as publishedPayment pattern
Direct buyerPolyshares, micro1, Scale AI, Mercor, Endless DataMercor connects to your tools; micro1 takes transfers “through our APIs or other approved methods”; Scale AI anonymizes inside your environment; Polyshares routes data through a specialist PII partnerA fixed fee after delivery and acceptance
Agent or marketplaceSimpleClosure AssetHub; Handshake AI, which says it connects businesses with AI labsAssetHub starts from a short form or a GitHub connection and processes every dataset for PII before licensingPrice minus a fee; AssetHub’s percentage isn’t published
Revenue shareTroveo; Labelbox Prism (upfront fee plus revenue share)Troveo works from your exports, with no OAuth or integrations; Prism removes PII, then transfers with customer-managed keysRecurring, with no fixed total

Two points shape the shortlist. Endless Data says “AI labs don’t license data from individual companies,” and the training-data companies above are how most operating companies in our sources reached the labs. And introducers are often paid. Referral bonuses published by the buyers themselves include up to $50,000 from Scale AI if it signs the company, $10K from Handshake AI at closing, and, from micro1, “$50,000 for deals up to $700,000, or 7.5% of the deal value for deals above $700,000,” paid after the company’s data is transferred and approved (read October 25, 2026). Our nine-buyer comparison covers each program’s data handling side by side.

Phase 4: Request indicative offers on one scope

Send two or three buyers the same scope sheet and compare their written offers line by line. Without a common scope, the prices aren’t comparable.

Prices for similar records vary because, as MIT Technology Review put it on October 13, 2026, valuations rest on “research theses.” The scope sheet should include:

  1. List each system with its first and last record dates.
  2. Give record counts per system.
  3. State headcount history and the share of records in English.
  4. Attach the exclusion list from phase 2.
  5. Say whether you’d accept exclusivity, and for how long.
  6. Name the delivery routes you’ll allow: connector, your own export or in-environment processing.

Published turnaround is short: one business day for a Labelbox Prism preliminary valuation, one to two weeks from intake for a Polyshares offer, and days or hours for a SimpleClosure viability assessment. Endless Data starts with a 20-minute call, then a data manifest you approve.

Put the answers in one comparison sheet with these columns: price, fixed fee or revenue share, exclusivity, term, deletion, trained-model position, payment trigger and date, the signing entity, and the named end buyers or buyer rules.

Phase 5: Write the scope and de-identification spec

Turn the chosen offer into a data manifest: what’s in, what’s out, which identifiers are removed, what’s kept, where the work happens and how long raw data is retained.

Spec itemWhat to write downWhat buyers publish
Systems and datesEach system and its date rangeEndless Data’s manifest lists systems, years, workflows in scope and exclusions, for the seller to approve
Identifiers removedNames, emails, phone numbers, account numbers, addressesPolyshares says these “are removed or replaced”
What’s keptRoles, timestamps, thread structurePolyshares keeps “Roles, timestamps, and the work itself”; Scale AI keeps threads, participants and reply structure
MethodTokenization, pseudonyms or synthetic rewritesPrism tokenizes names, emails and internal IDs; Troveo uses pseudonyms such as PERSON-014; micro1 says some datasets “may undergo synthetic rewrites”
Where it happensInside your environment, or after transferScale AI: inside your environment before extraction. Endless Data: before anything leaves your company. Polyshares: a PII partner, before Polyshares or a lab sees it. micro1: you transfer, then micro1 de-identifies
Sample reviewA de-identified sample of your own datamicro1 and Endless Data offer representative samples
Raw-data retentionA deletion date or schedulemicro1: raw data deleted on an agreed schedule. Prism: deletion within 30 days on defined triggers
Security evidenceReports and sub-processorsMercor states SOC 2 Type II; Prism uses customer-managed keys; Scale AI keeps an audit trail

Phase 6: Negotiate the license terms

Get these points in writing before any export. Each one has a published position from at least one buyer to anchor the conversation.

  1. Price exclusivity separately. Epoch AI (January 12, 2026) reports that exclusive AI training environments cost buyers 4 to 5 times as much as non-exclusive ones. Polyshares and Prism are exclusive by default, Endless Data is non-exclusive, and Troveo’s exclusivity is time-limited.
  2. Fix the term. Polyshares’ data-handling page says “a defined term,” while its four published case studies are “perpetual exclusive” licenses.
  3. Set a deletion deadline and a certificate. Prism’s kill clause forces deletion within 30 days for material breach, regulatory change or a change-of-control trigger you define up front.
  4. Limit future training, because past training can’t be reversed. Prism says models already trained “cannot be unlearned,” and Endless Data’s buyer terms let buyers keep using models trained during the license.
  5. Name the onward buyers, or the rules for them. micro1 licenses only to US and allied buyers. Polyshares doesn’t disclose which labs take which data. Troveo introduces buyers confidentially after signing.
  6. Tie payment to a date. micro1 allows itself 30 days to approve the data, then pays within 30 days of your invoice, so the outer bound is about 60 days after transfer by our arithmetic.
  7. Check M&A effects. A prior data license and its exclusivity or change-of-control terms surface in due diligence (Frankfurt Kurnit via Mondaq, October 2026).
  8. Get the seller-side contract early. Neither Polyshares nor Endless Data publishes seller terms we could read: Polyshares’ standard terms link led to a not-found page on both October 21 and October 25, 2026, and the Endless Data terms online cover its buyers.

Phase 7: Deliver, confirm acceptance and invoice

Deliver only what the manifest covers, through the agreed route, and log it. Payment clocks usually start at acceptance, so get acceptance in writing.

Delivery routeBuyer examplesOps checks
Tool connectorsMercor (Slack, Teams, Gmail, Salesforce, GitHub, Drive, Notion and “100+ supported tools”)Limit access scopes to the manifest; revoke access after delivery; ask about Slack’s API terms
In-environment processingScale AI (on-premises and VPC options)Who gets access, and the audit trail
API or approved transfermicro1Encryption in transit and a transfer log
Your own exportsTroveo, Endless DataExport only the manifest’s scope; scan for credentials first
Form or code connectionSimpleClosure AssetHubWhich repositories are selected; secrets removed
BuyerWhat starts the payment clockPublished timing
micro1Approval, then your invoiceUp to 30 days to approve, then within 30 days of invoice (read October 25, 2026)
PolysharesApproval, anonymization and deliveryNet 30 to 60 days
MercorDelivery of the anonymized dataset to the buyerTypically 2 to 4 weeks after signing
Labelbox PrismSigning, then downstream useUpfront fee at signing, plus a revenue share
Endless DataA fixed sum agreed before anything is sharedTiming after signing not published
TroveoEach saleNot published
Scale AI, Handshake AI, SimpleClosure AssetHubNot publishedNot published

Close the project with three records: written acceptance, confirmation that connector access is revoked, and, at the end of the term, a deletion certificate.

What sells and what doesn’t, system by system

The licensable part of each system is the firm’s own record of how work gets done. The excluded part is anything a client owns or that identifies a person.

SourceUsually licensableUsually excluded
Slack or TeamsInternal channels about how work gets done, de-identifiedSlack Connect and shared client channels; HR channels
EmailInternal process threadsClient correspondence under NDA; contact details
Drive or SharePointSOPs, playbooks, templates, training materialClient deliverables; contracts with confidentiality clauses
Project toolsTasks and tickets with client names removedTickets holding credentials or client environment details
CRMPipeline stages, activity patterns, notes with contacts strippedContact-level personal data
FinanceProcess documentation and de-identified workflowsClient books and proprietary pricing logic, both on Endless Data’s exclusion list
DesignAssets made for your own business; MyPortal Marketing licensed its own Figma and Canva files (Business Insider)Client brand work
Call recordingsRarely licensableRecordings without the consent your state requires

Price ranges, with sources

Advertised ranges run from $10K to “$4M+”, but the deals you can check are mostly in the five and low six figures. Figures below were read on official pages on October 21, 2026 and re-checked October 25 unless noted.

BuyerPublished rangePay structure
Scale AI$10K to $1M+, “illustrative value per data partnership”Not published; says recurring revenue is possible
Labelbox PrismAbout $50K for targeted datasets, up to $1M+Upfront fee at signing plus revenue share
SimpleClosure AssetHub“Tens to hundreds of thousands of dollars” (October 21 only)Percentage on success
Polyshares$100K to $2M+; four published deals of $110,000 to $450,000Fixed license fee, net 30 to 60 days
micro1“$200k-2M+”; payments “typically ranging from $150K to over $2M” (October 25)Fixed fee after approval and invoice
Handshake AI“$100K to $4M+”Not published
Endless Data“Up to $4M,” no typical rangeFixed sum agreed before sharing
TroveoFull-company deals “start at six figures”Revenue share on every sale
MercorNo range publishedWire on delivery to the buyer

Checkable deals sit lower. The Information reported (headline only) about $150,000 for a 14-person HVAC company, MIT Technology Review (October 13, 2026) described a wound-down startup getting about $25,000 for its code with about $15,000 pending for workspace data, and AIData.Broker, a sell-side broker, puts the median of the few public sales at $31.6K in its own compilation. For context, Epoch AI reports AI labs pay environment vendors $200 to $2,000 per training task. The full price evidence is on our company data value page.

Qualification screen

Screen yourself on the four signals buyers publish: headcount, years of history, language and region.

BuyerHeadcountHistoryLanguage and region
micro130+ full-time employees“Substantial historical operational data”Primarily English; US first, then other Western markets
Scale AI40+ employees preferred, case by caseEstablished data systems and real workflowsNot published
Handshake AI20+ full-time employees (referral page)3+ years in operationNot published
Endless DataRoughly 30+ employeesSeveral yearsEnglish; US, UK and Canada prioritized
PolysharesNone published“Real operating history,” any sectorNot published
Labelbox Prism, Troveo, MercorNone publishedNot publishedNot published
SimpleClosure AssetHubStartupsOperating or closingNot published

Red flags for the ops team

Stop the project if a buyer wants raw exports before pricing, sets a 48-hour deadline, or can’t say who signs, who pays and who receives the data.

  • Full export before an offer. SimpleClosure (October 1, 2026) warns against anyone wanting a full export before a meaningful offer. Counts and samples are enough to price; Polyshares says nothing leaves your systems until you accept its offer.
  • Raw data leaving before de-identification, without the contract saying so. Where scrubbing happens differs by buyer (phase 5). If raw data moves first, the license should say who holds it and for how long.
  • Connector access wider than the manifest. A connector that can read every channel can reach the client and HR material you excluded.
  • 48-hour deadlines. Business Insider (October 13, 2026) reports short “exploding” offers have become common in this market. It doesn’t attribute them to any company named here.
  • An unclear buyer chain. SimpleClosure’s checklist asks four questions: which company signs, who funds the purchase, who gets the files, and who owes you the money. A buyer that can’t answer all four isn’t ready.
  • Headline-only pitches. SimpleClosure also warns about new buyers advertising $1M to $5M.
  • Weak provenance on your side. Buyers have met sellers without rights: Surge AI’s Nick Heiner described to Business Insider a group trying to sell a codebase it didn’t own. Expect rights warranties, and keep the phase 2 records that back yours.

Deciding whether to sell at all? onfolio.com’s owner’s checklist for selling company data to AI labs covers the same decision from the owner’s side: rights, buyer types, red flags and what you might get.

Sources

Considering licensing your company’s data? Apply to Polyshares for an assessment.

FAQ

How do you sell AI training data?
Companies sell AI training data by licensing de-identified operational records, either to a training-data company such as micro1, Scale AI or Mercor, or through an agent or revenue-share program such as Troveo. The work runs in order: data audit, rights review, a written scope, de-identification, then delivery and acceptance before payment.
How do I download Slack channel data?
Workspace Owners and Admins export from Admin, then Workspace settings, Security and Import & export data, per Slack's help center (read October 25, 2026). Free and Pro plans export public channels only, and Free includes file links from the last 90 days. Private channels and DMs need Business+ or Enterprise and an application to Slack.
How do you license business data for AI training?
You grant a buyer the right to use a defined set of records for a defined purpose and term, while keeping ownership. Write the systems, years and exclusions into the agreement, then settle exclusivity, deletion, the position on trained models and the payment date. Labelbox Prism, for example, is exclusive by default and pays an upfront fee plus a revenue share.
Where can I find AI training data?
AI labs get much of their company workflow data from training-data companies that license it from operating businesses. micro1, Scale AI, Mercor, Handshake AI and Labelbox Prism all run programs that license company records, and micro1 says it licenses only to labs and enterprises in the US and allied countries (read October 25, 2026).
Does my company need to anonymize data before selling it?
Not always. micro1 says companies don't need to anonymize before transferring because it de-identifies sensitive information itself (read October 25, 2026), while Scale AI anonymizes inside your environment before extraction. Either way, agree in writing who removes identifiers, to what standard, and whether that happens before data leaves your systems.
Can AI sell your data?
An AI company can pass your company data on only as far as your license allows. Training-data companies exist to supply AI labs, so onward licensing is normal: micro1 commits not to resell or distribute data until identifying information is anonymized, and Endless Data licenses pooled data to several buyers. Read the onward-transfer clause before signing.