Software companies
Conversation intelligence vendors: can you train on or license customer calls?
By SourceX Editorial · Reviewed by Noah Loul ·
Short answer
A conversation intelligence vendor can rarely license customer calls to outside AI developers, and can train its own models on them only where contracts and recording consent allow. The recordings belong to the customer, and callers consented, if at all, to recording for that customer. What stays licensable is the vendor's own code, support and sales history.
Key takeaways
- Recorded calls, transcripts and synced emails captured by your platform are customer data that you process on the customer's behalf.
- Recording consent was given to your customer for its purposes and does not stretch to licensing calls to third parties.
- Training your own product models needs explicit contract permission, and enterprise buyers often negotiate it out.
- Your own sales calls, support tickets, engineering history and product decisions form the licensable layer, after review.
Why customer calls are not yours to license#
Customer calls are not a conversation intelligence vendor's to license because the vendor captures them as a processor for its customer. The customer decided to record its sales calls, chose which meetings to capture and controls the recordings, transcripts and emails under the contract.
Vendor terms usually say this plainly. Gong's customer terms, for example, define customer data to include data collected and processed by or for the customer using the services, and state that the agreement gives Gong no right, title or interest in that customer data. A vendor in that position cannot grant an outside developer rights it does not hold.
Recording consent is narrower than it looks#
Recording consent on a sales call covers the recording, for the purposes the customer disclosed, and little else. The prospect on the other end heard a notice from your customer, not from you, and depending on where each participant was, an all-party consent rule may apply to the recording itself.
Licensing those calls to an AI developer is a new use by a new party. Even where a notice mentioned quality or training purposes, the phrase is usually read as training the customer's staff, not training outside models. Voice raises its own issues, since some state laws may treat voiceprints as biometric identifiers. Treat this as general information rather than legal advice; consent rules and contracts are assessed case by case with counsel.
Can you train your own product models on calls?#
Training your own product models on customer calls is possible only where the customer contract grants that right, and many enterprise buyers now ask for no-training clauses during security review. The same question then passes to your sub-processors, including any model provider that sees transcripts.
Public reaction shows why the wording matters. On August 7, 2023, after backlash over earlier changes to its terms, Zoom amended its terms to say that customers' audio, video and chat content would not be used to train its AI models unless customers consented, and its current terms say it does not use communications-like customer content to train its own or third-party AI models. Sales tech buyers read vendor terms with that episode in mind.
If you do train on customer content, limit it to customers who opted in, keep training sets traceable to each customer, and make them follow your retention schedule. Gong's published standard, for instance, keeps emails, calls and transcripts for three years or for as long as the company remains a customer, whichever is shorter, and a training copy that outlives that rule becomes the weak point.
Contract terms to check in your customer agreements#
Customer agreements decide how far a conversation intelligence vendor can go with call data, and the relevant terms are spread across the master agreement, the DPA and the order form. Read them together, because an order form for a large customer often narrows the standard terms.
| Term | What it usually says | Effect on training or licensing |
|---|---|---|
| Definition of customer data | Covers recordings, transcripts, synced emails and CRM fields | Places calls firmly in the customer's column |
| License granted to the vendor | A limited license to process customer data to provide the services | Gives no right to license data onward |
| Product improvement clause | Use of customer or usage data to improve the service | May or may not reach model training; read it narrowly |
| Aggregated data clause | De-identified, aggregated insights for benchmarks | Rarely extends to third-party licensing |
| Sub-processor list | Named model providers and hosting services | Each provider's training terms must match your promises |
| Retention and deletion | Customer-set retention and deletion on termination | Training copies must follow the same rule |
What a conversation intelligence vendor can license#
A conversation intelligence vendor can license the records it created itself, not the records it captured for customers. The table sorts the usual record types.
| Record | Owner | Licensable by the vendor? |
|---|---|---|
| Customer call recordings and transcripts | Customer | No, without customer permission and a consent review |
| Customer emails synced from inboxes | Customer | No; they also hold third parties' personal data |
| Customer CRM fields synced to the platform | Customer | No |
| Aggregated benchmarks across customers | Depends on the contract | Rarely for third parties; usually limited to improving the service |
| Your own sales calls with prospects | Vendor, within consent limits | Possibly, after consent review and de-identification |
| Your support tickets and onboarding records | Vendor | Usually, after customer names are removed |
| Engineering history: issues, code reviews, releases | Vendor | Usually, after a confidentiality review |
| Product decisions and model evaluation notes | Vendor | Usually, with customer examples removed |
Your own sales calls are a different case#
Your own recorded sales calls are a different case because your company recorded them as a party to the conversation. Discovery calls, demos and renewal conversations linked to CRM outcomes are the kind of record that teams building AI sales agents look for.
They still need work. The prospects consented to recording under your notice, which may not reach licensing, so sort the archive into calls to include, calls to transform through transcript de-identification, and calls to exclude.
- Confirm what each recording notice and meeting invitation said.
- Map where participants were located, to identify consent rules that may apply.
- Prefer transcripts over audio, with names, companies and figures removed.
- Exclude calls where a prospect screen-shared its own customer data, health or financial details.
- Link the remaining transcripts to deal stage and outcome from the CRM.
Illustrative: a sales engagement vendor separates two archives#
Illustrative: a fictional sales engagement platform records and transcribes calls for its customers and also runs its own sales team on the product. The CEO asks whether either archive could be licensed.
Counsel's review places every customer workspace out of scope: the contracts limit use to providing the service, and the calls were recorded under customers' notices. The vendor's own workspace is reviewed separately. Calls with a clear notice and participants in locations where one-party consent applied are transcribed, de-identified and linked to deal outcomes; the rest are excluded.
The vendor also reviews engineering history and support tickets. The final scope covers the vendor's own records only, documented so the company can answer any customer who asks whether its calls were involved.
How SourceX approaches call data#
SourceX treats call recordings as a record type with a high privacy burden, which lowers net value in the SourceX Enterprise Data Value Framework. In the SourceX five-step transaction, the Rights step separates customer workspaces from the vendor's own records before anything moves, and Preparation removes personal and confidential details from transcripts. The SourceX Evidence Packet records the consent basis, permitted use and release authorization for each package the vendor approves.
Frequently asked questions
Can we license calls if the customer agrees?
Customer agreement is necessary but may not be enough. The prospects and contacts on the calls have their own rights, and the customer's notice may not cover licensing. Any customer-approved package still needs a consent review and de-identification, usually delivered as transcripts rather than audio.
Are transcripts safer than audio?
Usually. De-identified transcripts drop the voice, which some laws may treat as biometric, and let names, companies and figures be replaced. They lose tone and timing, which matters for some uses, but they carry far less privacy burden than raw recordings.
What about the emails our platform syncs?
Synced emails belong to the customer and often include third parties who never used your product. Treat them like calls: customer data, out of scope for licensing, and fully in scope for your retention and deletion commitments.
Does an aggregated data clause let us license call insights?
Usually not to third parties. Aggregated data clauses in sales tech contracts commonly allow benchmarks and product improvement. Licensing derived data to an outside developer is a different purpose, and transcripts of individual calls are not aggregated data at all.
Should we tell customers we license our own records?
Being clear helps, because customers will ask. A short statement that customer content is never licensed, and that only vendor-owned records are licensed after de-identification, answers most security questionnaires and keeps sales from improvising.
Sources
- Gong's customer Terms and Conditions define Customer Data as data submitted by or for Customer to the Services or collected and processed by or for Customer using the Services. They state that Gong acquires no right, title or interest from Customer in or to any Customer Data under the Agreement. Source
- Gong's standard data retention period for existing customers is the lesser of three years and the time the company is a customer, and the retained data includes emails, calls and transcripts stored in Gong. Source
- On August 7, 2023, after backlash over March 2023 changes to its terms, Zoom added to Section 10.4 of its Terms of Service the sentence: Notwithstanding the above, Zoom will not use audio, video or chat Customer Content to train our artificial intelligence models without your consent. Source
- Zoom's Terms of Service (Section 10.2) state that Zoom does not use audio, video, chat, screen sharing, attachments or other communications-like Customer Content (such as poll results, whiteboard and reactions) to train Zoom or third-party AI models. Source
Related resources
See if your company qualifies
A short company assessment. No data uploads are needed.