Manufacturing
Can a co-packer use production data from the brands it makes products for?
By SourceX Editorial · Reviewed by Noah Loul ·
Short answer
Co-packer data ownership usually splits three ways. Brands own recipes, specifications and artwork; co-packers generally control their own line performance, sanitation and scheduling records; and batch records sit in between, governed by the co-manufacturing agreement. A co-packer can usually use its own operating data, but any use outside the plant depends on the agreement's confidentiality and data clauses.
Key takeaways
- Recipes, formulas, specifications and artwork are brand confidential information under most co-manufacturing agreements.
- Line performance, sanitation, maintenance and scheduling records are usually the co-packer's own operating records.
- Batch records mix brand formulas with plant performance, so they need redaction or consent before any use beyond serving the brand.
- Broad definitions of confidential information can sweep in records the co-packer assumed were its own.
Can a co-packer use production data from its brand customers?#
A co-packer can usually use production data from its brand customers to run its own plant, but using that data for anything else, such as licensing it or sharing it outside the company, depends on the co-manufacturing agreement. Most agreements are drafted from the brand's side, so they protect formulas and specifications in detail and say little about the co-packer's own records.
That silence cuts both ways. A co-packer may assume its line data is its own, while a broad confidentiality clause covering all information relating to the products could reach it. Reading the definitions section is the first step, before anyone exports a single report.
Personal details matter too, whatever the agreement says. Batch records and sanitation logs carry operator names and signatures, and quality files can include consumer complaint details passed on by brands. Those details are removed before any record leaves the plant.
Brand-owned, co-packer-owned and negotiated records#
Brand-owned, co-packer-owned and negotiated records follow a common pattern, though each agreement can change it. The table shows where records usually fall and why.
The negotiated rows are where most disputes start. They are product-specific, so a brand sees its formula in them; they are also plant-specific, so the co-packer sees its own performance.
| Record | Usual position | Why |
|---|---|---|
| Recipes, formulas and brand process specifications | Brand-owned | Core brand intellectual property and trade secrets |
| Packaging specifications, artwork and labels | Brand-owned | Brand assets supplied for production |
| Sales forecasts and purchase orders | Brand confidential | Commercial information about the brand's business |
| Line speeds, OEE, downtime and changeovers | Co-packer controlled | Generated by the co-packer's equipment and people |
| Sanitation, environmental monitoring and maintenance logs | Co-packer controlled, subject to audit rights | Plant records kept regardless of any one customer |
| Production schedules across customers | Co-packer controlled | Plant planning, though each brand's volumes stay confidential |
| Batch records and lot traceability | Negotiated | Contain brand formulas alongside plant performance |
| Certificates of analysis and test results | Negotiated | Product-specific results the brand often owns or must receive |
| Yield and waste by SKU | Negotiated | Reveal formula losses and cost structure |
Clauses to read before using production data#
The clauses that decide data use are spread across a co-manufacturing agreement's confidentiality, intellectual property, records and termination sections. Read them together rather than one at a time.
Note which clauses survive termination. Confidentiality obligations commonly continue after a brand leaves, so agreements with former customers still govern historical records from their production years.
- Definition of confidential information: does it cover all information relating to the products, or only information the brand discloses?
- Permitted use: may confidential information be used only to perform the agreement?
- Ownership of records and data: does the agreement assign production records or batch data to the brand?
- Improvements: who owns process improvements made while producing the brand's products?
- Audit and record retention: what must be kept, for how long, and who may inspect it?
- Return or destruction: what happens to records when the agreement ends, and what survives?
Why batch records are the hardest category#
Batch records are the hardest category because one document mixes the brand's formula with the co-packer's performance. Ingredient weights, supplier lots and process parameters sit beside operator notes, deviations, line stops and sanitation checks.
Brands treat formulas as trade secrets, and trade secret status turns on secrecy. Under the Defend Trade Secrets Act, information qualifies only if its owner has taken reasonable measures to keep it secret, and Justice Department guidance lists examples such as confidentiality agreements and need-to-know access. A co-packer that shares batch records loosely can create risk for the brand and a breach claim against itself.
Redaction is the usual answer. Removing ingredient identities, quantities, supplier lots and SKU names can leave the plant-side story, such as deviations, holds and corrective actions, but the redacted record still needs a rights review against each agreement.
Ways to reuse your own records without exposing a brand#
Ways to reuse production records safely range from aggregation to explicit brand consent, and the right approach depends on both the agreement and the record. Often a co-packer combines several approaches for different years and customers.
Keep a written record of which approach was applied to which customer and period. That record is what lets you answer a brand's question quickly if it ever asks how its information was handled.
| Approach | What it does | Remaining question |
|---|---|---|
| Aggregate across customers | Reports performance by line and shift, not by brand | Whether a single-brand line still reveals that brand |
| Redact brand identifiers | Removes brand names, SKUs, formulas and artwork | Whether the agreement still covers the redacted record |
| Exclude negotiated records | Uses only clearly co-packer records | Whether broad definitions reach those records anyway |
| Ask for consent | Gets written permission for a defined use | Scope, duration and any conditions attached |
| Fix it in new agreements | Adds a clause reserving the co-packer's operating data | Older agreements still govern historical records |
Illustrative: a beverage co-packer sorts its archive#
Illustrative: a fictional beverage co-packer has bottled for many brands over the years, using an ERP for batches, a maintenance system for its fillers and paper sanitation logs scanned to a shared drive. A developer of production scheduling software asks about licensing its line histories.
Counsel reviews the agreements. Most define confidential information as information the brand discloses, but two define it as anything relating to the products. The co-packer licenses downtime, changeover and maintenance records only for lines and years governed by the narrower agreements, removes brand and SKU names, excludes batch records entirely, and asks one former brand for consent. That brand declines, and its production years are carved out.
How SourceX approaches co-packer records#
SourceX approaches co-packer records by separating the plant's own operating history from brand material before anything is prepared. In the SourceX five-step transaction, the Rights step maps each co-manufacturing agreement to the records and years it governs, and the Preparation step removes brand identifiers, formulas and personal details.
Records from lines that ran a single brand for long stretches get extra attention, because aggregating by line alone may not hide which brand they describe. Those periods are either excluded or released only with the brand's written consent.
The SourceX Evidence Packet records which agreements were reviewed, which records were excluded, the permitted use and the co-packer's release authorization. The co-packer keeps ownership, approves each step and licenses its records rather than selling them.
Frequently asked questions
Can a co-packer use brand data to improve its own operations?
Usually, yes, as part of performing the agreement. Using production data to schedule lines, plan maintenance or shorten changeovers is normally within the purpose of the relationship. The question changes when data leaves the plant or is used for another customer's benefit, so check the permitted-use language.
Do brands have to be told about de-identified data use?
That depends on the agreement. Some agreements restrict any use of information relating to the products, even in de-identified form; others protect only what the brand discloses. Where an agreement is unclear, asking the brand is often the simplest path, and counsel can advise on whether notice or consent is needed.
What about records kept for food safety rules?
Records a plant keeps for food safety, such as sanitation and monitoring logs, exist regardless of any one customer. Regulatory retention requirements and agreement terms both apply, and agreements may give brands audit access. Keeping a record for regulatory reasons does not by itself make it licensable; the rights review still applies.
Should new co-man agreements address data rights?
Yes. A short clause reserving the co-packer's operating data, such as line performance, maintenance and sanitation records with brand identifiers removed, prevents later disputes. Pair it with strong confidentiality for formulas and specifications so brands see that their core assets remain protected.
Does a change of ownership affect these obligations?
Generally the obligations follow the agreements. If the co-packer is sold, confidentiality and data terms in existing agreements usually continue to bind the business, and a buyer will want to know what has already been shared. Documenting past data use makes that diligence question easy to answer.
Sources
- Under 18 U.S.C. 1839(3), information qualifies as a trade secret only if the owner has taken reasonable measures to keep it secret and it derives independent economic value from not being generally known. Source
- DOJ guidance states that trade secret protective measures need not be absolute but must be reasonable under the circumstances, citing examples such as advising employees of the trade secret's existence, limiting access on a need-to-know basis, requiring confidentiality agreements, and keeping documents locked. Source
Related resources
See if your company qualifies
A short company assessment. No data uploads are needed.