Skip to content

Leadership and readiness

Go/no-go criteria for a first data licensing deal

By SourceX Editorial · Updated

Short answer

Whether to license your company data in a first deal comes down to four criteria: how clear your rights are, how much of each record is about identifiable people, how competitively sensitive it is, and whether you have the people to do the work. Score each record family, then proceed, proceed with exclusions, or stop.

Key takeaways

  • A first deal should be decided on four criteria: rights clarity, personal data share, competitive sensitivity and internal capacity.
  • There are three outcomes, not two: proceed, proceed with exclusions, or stop.
  • Stop when removing the risky part would remove the value; exclude when the risky part can be carved out cleanly.
  • A weak score on one criterion usually means exclusions or a later start, unless that criterion is rights clarity.
  • A stop today can become a proceed after a contract renewal, a system change or a cleaner rights position.

What decides whether a first data licensing deal should go ahead?#

A first data licensing deal should go ahead only when four criteria score well enough: rights clarity, personal data share, competitive sensitivity and internal capacity. They sit on top of a baseline question, whether your records are substantial and connected enough for a buyer to want them, which a fit check answers first.

The scorecard gives three outcomes rather than a yes or no. Many first deals end as proceed with exclusions: the core record family goes forward, and specific fields, customers or record types are carved out. That is a normal result, not a compromise.

Score each record family separately. Support tickets, job histories and personnel files rarely land in the same place, and a single company-wide verdict hides the families that could move.

The go/no-go scorecard#

The go/no-go scorecard sets out what each outcome looks like for each criterion. Fill it in with the people who run the systems and the counsel who knows your contracts, not from memory in a leadership meeting.

The go/no-go scorecard
CriterionProceedProceed with exclusionsStop
Rights clarityCompany-owned records; contracts silent or permissive on internal recordsSome customers or vendors restrict use, and those can be carved outKey contracts prohibit use, or ownership is unclear
Personal data shareFew identifiers, mostly in structured fieldsIdentifiers in free text that can be removed while keeping meaningThe value depends on identifiable people
Competitive sensitivityProcess records with little pricing or strategyPrice, margin or customer-name fields that can be removedThe value is the sensitive part, such as bid strategy
Internal capacityA sponsor, a systems lead and counsel time availableCapacity exists after a known busy periodNo owner, or a major system go-live underway

Rights clarity: can you show you are allowed to license?#

Rights clarity means you can point to the documents that let you license a record family for AI development. Start with customer contracts and master service agreements, since confidentiality and data use clauses often decide the answer, then check vendor terms for the systems that hold the records and the notices you have given employees.

Some record families fail on ownership rather than wording. An engineering firm's client deliverables, a manufacturer's customer-owned designs and a software company's customer code typically belong to someone else. Those land on the stop side even when the rest of the archive proceeds.

Rights clarity behaves differently from the other criteria. Weak scores on personal data, sensitivity or capacity can usually be managed with exclusions or timing. A weak rights score cannot be engineered away; it needs a contract answer, a consent or a smaller scope.

Personal data and competitive sensitivity: what has to come out?#

Personal data share measures how much of each record is about identifiable people. Support tickets that name a customer contact can usually be de-identified without losing the problem and the fix. A staffing firm's candidate files are different, because the person is the subject of the record.

Competitive sensitivity measures what would hurt if a rival saw it. Pricebooks, margin fields, bid histories and named customer lists are common candidates for removal. For each family, ask: if we strip the sensitive fields, is a useful record of work still left?

  • Proceed when sensitive content sits in fields you can drop without breaking the record.
  • Proceed with exclusions when removal is possible but needs review, such as names inside free-text notes.
  • Stop when the sensitive part and the valuable part are the same thing.

Which exclusions come up most in a first deal?#

The exclusions that come up most in a first deal follow the record family, not the industry. The table below lists common carve-outs so you can check whether a family still holds a useful record of work once they are removed.

If a family needs every exclusion in its row and little remains, score it stop for now. If the exclusions are narrow and the decision trail survives, it is a strong proceed with exclusions candidate.

Which exclusions come up most in a first deal?
Record familyCommon exclusionWhy
Support tickets and chatsCustomer contact names, emails, phone numbers and attached invoicesPersonal data and customer confidentiality
CRM activityDeal values, discount approvals and named contactsCompetitive sensitivity and personal data
Field service job recordsHomeowner identifiers, gate codes and pricebook fieldsPersonal data, safety and pricing
Engineering issues and code reviewsCustomer code, secrets and unpatched vulnerability detailsOwnership and security
Quality and maintenance recordsCustomer part numbers and customer-owned drawingsCustomer ownership and contract terms
Email and internal chatPrivileged threads and HR mattersPrivilege and employee trust

Internal capacity: who will actually do the work?#

Internal capacity is the criterion owners most often skip. A first deal needs an executive sponsor who can make calls, a systems lead who can run exports and answer schema questions, and counsel time for the rights review and the contract.

Timing matters as much as headcount. Starting during an ERP go-live, a peak season or an audit puts the work on people with no slack, and a rushed first deal is more likely to include something that should have been excluded. If capacity is the only weak score, schedule the work rather than stopping it.

Illustrative: an electrical contractor scores its first deal#

Illustrative: a fictional electrical contractor with a residential service division and a commercial projects division is approached about its field service history. Its records include service calls, estimates, technician notes, invoices and warranty callbacks across many years in its field service system.

Rights score proceed for residential service, because the records are company-owned and its customer terms are standard. Commercial project files score stop, because several subcontracts with general contractors restrict use of project documents. Personal data scores proceed with exclusions, since homeowner names, addresses, phone numbers and gate codes appear in technician notes. Competitive sensitivity scores proceed with exclusions for pricebook and margin fields, and capacity scores proceed once the busy summer season ends.

The owner decides to proceed with exclusions: residential service records only, identifiers and pricing removed, with work starting after peak season. The commercial division stays out until its subcontract terms are reviewed.

How SourceX applies go/no-go criteria#

SourceX builds these criteria into the SourceX five-step transaction. Rights clarity is tested at the Rights step, personal data and competitive exclusions are applied at Preparation, and the supplier makes the final call at Approval, with the option to stop at any step.

The baseline question of whether records are worth licensing is assessed with the SourceX Enterprise Data Value Framework, a SourceX methodology that gives qualitative ratings on drivers such as uniqueness, domain expertise, human-generated signal, recency, rights and AI utility, and weighs preparation cost and privacy burden against them. The scorecard is then applied to record families that clear that baseline. Nothing is shared during the initial assessment, which runs on metadata alone.

Frequently asked questions

Who should make the final go/no-go call?

The CEO or owner, as the person who answers for brand and control, with the general counsel's view on rights and the CFO's view on economics. In a portfolio company the sponsor may also need to consent, and the authorized signer of the supplier entity signs the license.

Can a stop become a proceed later?

Yes. Stops are often tied to a specific contract, system or moment. A customer contract renewal with clearer data terms, the end of a legal hold or a finished system migration can change the score. Record why each family stopped so you can revisit it.

What if only one criterion fails?

It depends which one. A weak personal data, sensitivity or capacity score usually leads to exclusions or a later start. A failed rights score usually means stop for that record family until the contract question is resolved, even if everything else looks strong.

Do we need board approval for a first deal?

That depends on your governing documents, investor rights and credit agreements, which may require consent for licensing company assets. Even where approval is not required, many owners brief the board before a first deal so there are no surprises later.

Should a first deal be small?

Usually. A narrow first package from one strong record family tests your process, your exclusions and your approval path with less exposure. Later deals can widen the scope once the company has seen how preparation and delivery work in practice.

Does a proceed score mean the deal will happen?

No. A proceed score means the company is willing and able to license a record family. Whether a license is signed depends on a buyer engaging with that package and agreeing terms on permitted use, price and delivery that the company accepts.

Related resources

See if your company qualifies

A short company assessment. No data uploads are needed.

See if you qualify