Guide
De-identifying company data for AI training: the full playbook
By SourceX Editorial · Updated
Draft under editorial review.
Short answer
De-identifying company data means removing or replacing anything that points to a person or a customer, such as names, emails, phone numbers and account numbers, while keeping the work itself. It is followed by checks on samples and your approval before anything leaves your company.
How it works at a glance
- 01
Supply
- 02
Rights
- 03
Preparation
- 04
Approval
- 05
Delivery
What is removed#
- Names and contact details
- Account and ID numbers
- Addresses and locations finer than needed
- Secrets, credentials and hostnames
- Free text that reveals identity
How it is checked#
- Automated detection, then human review of samples
- Exclusion of whole records when in doubt
- Your review of a sample before delivery
Who does it#
SourceX evaluates the data, then prepares it directly or through a certified, approved third-party partner.
How a SourceX transaction works#
- Supply: you describe your systems and records in a short fit check. No data is shared at this stage.
- Rights: we review contracts, privacy notices and ownership so you know what you can license.
- Preparation: SourceX evaluates the data, then prepares it directly or through a certified, approved third-party partner. Personal details are removed and confidential material is excluded.
- Approval: you see exactly what would leave your company and approve it before anything moves.
- Delivery: the approved dataset is delivered under a signed license. Businesses are paid when a deal closes; payment terms are set per transaction and confirmed before any data moves.
Remove, replace or keep#
| Element | Typical treatment |
|---|---|
| Customer name | Replace with a placeholder |
| Email or phone | Remove |
| Product names | Usually keep |
| Health or financial details | Exclude unless rules allow |
Check your fit
Q1 / 05 · COMPANY SIZE
How many full-time employees at your peak?
Examples
Illustrative
A support team's ticket history
A 120-person software company has six years of help-desk tickets. Customer names, emails and account numbers are removed; the questions, steps taken and resolutions remain. The company approves a sample before delivery.
Illustrative
An engineering team's bug fixes
A manufacturer's IT team has years of tickets linked to fixes. Secrets, hostnames and personal details are stripped, and code owned by third parties is left out after a rights review.
Frequently asked questions
Does de-identification guarantee anonymity?
No method is perfect, which is why records are reviewed, doubtful ones excluded, and buyers contractually barred from re-identification.
Sources
Related
General information, not legal advice. Editorial policy.
See if your company qualifies
A short company assessment. No data uploads are needed.