Private equity and portfolios
Who owns portfolio company data: the fund, the holdco or the operating company?
By SourceX Editorial · Reviewed by Noah Loul ·
Short answer
Portfolio company data is usually held by the operating company, not the fund or the holdco, because owning shares does not transfer a subsidiary's records or contracts. Customer contracts and the privacy laws that may apply then limit what the operating company can do with those records. The working rule: the entity that collected the records signs, and the owners consent.
Key takeaways
- Customer contracts and privacy obligations sit at the top of the ladder and can limit use regardless of who owns the shares.
- The operating company that collected the records normally holds them and signs any license for them.
- A holdco controls the operating company but holds rights in its records only through an intercompany license or assignment.
- A fund's information rights let it receive reports; they do not let it license portfolio company records.
Who owns the data in a portfolio company?#
In most sponsor structures, the operating company owns or controls its business records, subject to its contracts and the privacy laws that may apply. The fund owns equity, typically through one or more holding companies, and equity ownership does not move the operating company's assets up the chain.
Data ownership is also narrower than it sounds. Records are rarely owned outright the way a building is. A company holds a mix of property rights, contract rights and obligations: it may own its internal documents, hold a license to use content customers provide and owe confidentiality to suppliers. The useful question is not who owns the data but who can authorize a specific use of it.
The ownership ladder#
The ownership ladder runs from the contracts that bind the records down to the fund at the top of the equity chain, and each level has a one-sentence rule. Read it from the first row: a restriction at a higher row binds every row below it.
| Level | One-sentence rule | Documents to check |
|---|---|---|
| Customer contracts and privacy obligations | What customers, individuals and suppliers were promised limits every use, whoever owns the shares | Customer agreements, data processing terms, privacy notices and NDAs |
| Operating company | The entity that collected the records holds them and signs any license for them | Purchase agreement, IP schedules and system contracts |
| Holdco | It controls the operating company's board but holds rights in its records only through a written license or assignment | Intercompany agreements, board minutes and the credit agreement |
| Fund | It holds equity and information rights, which let it receive reports but not license the records | Shareholder agreement, management rights letter and fund documents |
Who else can hold a claim over the records?#
Lenders and individuals can also hold claims that sit outside the equity chain. Credit agreements often take a security interest over a borrower's intangible assets and may restrict licenses of intellectual property without lender consent, so check the covenants and security documents before any license is signed.
Individuals whose personal data appears in the records may have rights under the privacy laws that may apply, whatever the corporate structure. Employees can be in the same position for internal email, chat and HR-adjacent records, which is one reason those record families usually need the most preparation.
How acquisitions change who holds the records#
How a company was acquired changes which entity holds its records today. In a stock purchase, the acquired company usually keeps its records, contracts and obligations, and only its owner changes. In an asset purchase, the purchase agreement's list of acquired assets, which often includes books and records, decides what moved to the buyer's entity and what stayed behind.
Mergers and internal reorganizations add another layer. When add-ons are merged into a platform entity, the surviving entity generally holds what the merged companies held, but contracts with anti-assignment or change-of-control terms may need separate attention. Map each record family to its current legal holder before anyone discusses licensing.
Who signs in common portfolio situations#
The signer for a data license is usually an authorized officer of the entity that holds the records, with consents from the owners above it. The table shows common patterns; your own documents decide the actual answer.
| Situation | Who usually holds the records | Who usually signs |
|---|---|---|
| Stock acquisition, company kept separate | The acquired operating company | Its authorized officer, with any sponsor consents |
| Asset acquisition | The buyer entity, for assets listed in the purchase agreement | The buyer entity's authorized officer |
| Add-on merged into the platform | The surviving platform entity | The platform's authorized officer |
| Group-wide system run by a shared services entity | Usually each operating company, with the shared entity as a service provider | Each operating company for its own records |
| Wound-down subsidiary | The subsidiary or its successor, as the dissolution documents provide | The wind-down officer or the successor |
Questions counsel should answer before anyone signs#
Before anyone signs a data license in a portfolio, counsel should be able to answer a short set of questions in writing. The answers become the rights section of the deal file and save time when a buyer or acquirer asks the same questions later.
- Which legal entity holds each record family today, and how did it get there?
- Which customer contracts, supplier terms and privacy notices applied when the records were collected?
- Does any intercompany agreement give the holdco or a sister company rights in the records?
- Do the credit agreement or security documents restrict licensing or require lender consent?
- Do the shareholder agreement or management rights letter require sponsor consent?
- Are there minority shareholders whose interests the operating company's board must weigh?
- Who is the authorized signer, and what board approval does that person need?
Illustrative: two architecture firms and a shared services entity#
Illustrative: a fictional holdco owns two architecture firms acquired in separate stock deals. A shared services entity in the group runs one Deltek instance and one document management system for both firms, and the operating partner wants to explore licensing project scheduling, RFI and submittal records.
Group counsel works through the ladder. Client agreements at both firms treat drawings and deliverables as client property, so those are carved out. Internal records such as schedules, RFI logs and internal review comments belong to each firm. The shared services entity holds the systems contract but acts as a service provider, not the holder of the records. The credit agreement requires notice to the lender for any license of intellectual property.
The outcome: each firm signs for its own records, the holdco gives the consent its shareholder documents require, the lender receives notice, and the shared services entity signs only a short acknowledgment covering export support.
How SourceX identifies the supplier entity#
SourceX identifies the supplier entity in the Rights step of the SourceX five-step transaction, before any preparation begins. The supplier is the entity that holds the records and the contracts they came from, which in a portfolio is usually the operating company.
The SourceX Evidence Packet then records provenance, licensing rights, permitted use, the privacy record and release authorization, including the signer and any sponsor, board or lender consents. That record answers the ownership question once, in writing, for the buyer and for any future acquirer of the company.
Frequently asked questions
Can a private equity fund sign a data license for its portfolio company?
Generally not on its own, because the fund holds equity rather than the company's records. The fund can approve, consent to or encourage a license, and its documents may require that consent. The operating company's authorized signer usually executes the license itself.
Does a wholly owned subsidiary still need to sign?
Yes, in most cases. Full ownership gives the parent control over the board, but the subsidiary remains a separate legal entity with its own assets and contracts. The parent can direct the decision through the board; the subsidiary still signs.
Can an operating partner commit a portfolio company to a license?
Not usually by acting alone. Operating partners often sit on portfolio boards and can propose, sponsor and help negotiate a license, but the commitment is made by the operating company through its authorized officers and board. Where sponsor consent is also required, it is given separately under the shareholder documents.
If records sit in the holdco's cloud account, does the holdco own them?
Not necessarily. Hosting or administering a system is different from holding the rights in the records it stores. Counsel usually looks at which entity collected the records, under which contracts, and whether any agreement transferred them, rather than whose name is on the cloud subscription.
Do fund documents affect portfolio company data?
Rarely directly. Fund documents govern the fund and its investors. They can matter indirectly, for example through restrictions on certain activities or conflict rules when a sponsor affiliate takes part in a transaction. Counsel should check them when the sponsor or its affiliates play an active role.
What happens to the records of a dissolved operating company?
It depends on the dissolution documents and the state law that applies. Records may stay with the company during winding up, pass to a successor or be subject to retention duties. Confirm who has authority to act for the company and which contracts and notices still govern the records before any use.
Related resources
- QuestionDo I need customer consent to license support tickets?
- QuestionHow do I tell my employees about data licensing?
- InsightDo you need client consent to license de-identified RFIs and submittals?
- InsightCan a distributor license its pricing and quote history?
- InsightHandling deletion requests after data has been licensed
- IndustryLegal data
See if your company qualifies
A short company assessment. No data uploads are needed.