Skip to content

Glossary

Enterprise data licensing, term by term.

99 plain-language definitions of the terms used in licensing enterprise data for AI.

A

  • Agent trajectory

    The full sequence of steps an AI agent or person takes to complete a task, including actions, tool calls and results.

  • AI training data

    Information used to teach an AI model patterns, such as text, conversations, images, audio, code or action records.

  • API rate limit

    A cap on how many requests a program can make to a software service in a given time.

B

C

  • Call transcript

    A written text version of a phone or video call, often produced by speech-to-text software.

  • Chain of custody

    A documented record of who held, accessed or changed something, and when, from collection to delivery.

  • Chain of thought

    A model's intermediate reasoning steps written out before its final answer.

  • Computer-use data

    Records of people operating software, such as screen recordings or click and keystroke sequences.

  • Consent management

    The tools and processes a company uses to collect, record and honor people's choices about how their data is used.

D

  • Data annotation

    Adding labels or metadata to raw data so models can learn from it.

  • Data anonymization

    Irreversibly transforming data so individuals cannot be identified.

  • Data as a product

    Treating a dataset as something designed, documented and maintained for its users, with clear ownership and quality standards.

  • Data broker

    A company that collects personal information about consumers, often from public and commercial sources, and sells it to others.

  • Data catalog

    An inventory of a company's data assets with descriptions, owners and metadata so people can find and understand them.

  • Data clean room

    A secure environment where parties can analyze combined data without seeing each other's raw records.

  • Data controller

    Under GDPR, the organization that decides why and how personal data is processed.

  • Data cooperative

    An organization where members pool data and govern its use collectively, often sharing the benefits.

  • Data export

    Copying records out of a software system into files or another system.

  • Data governance

    Policies and controls that manage data's ownership, quality, access, use, retention and deletion.

  • Data intermediary

    An organization that connects data holders with data users and helps arrange access on agreed terms.

  • Data inventory

    A list of the systems, record types, volumes and date ranges a company holds.

  • Data lakehouse

    A data platform that combines low-cost data lake storage with database-style tables and governance.

  • Data licensing

    Granting specific rights to a dataset while the supplier retains ownership of their original records and SourceX owns the deidentified version.

  • Data lineage

    A map of where data came from and every step it passed through before reaching its current form.

  • Data minimization

    Collecting, keeping and sharing only the data needed for a specific purpose.

  • Data processing agreement

    A contract that sets the rules for how a processor handles personal data for a controller.

  • Data processor

    Under GDPR, an organization that handles personal data on behalf of a controller and only on its instructions.

  • Data provenance

    The documented origin and history of a dataset: where it came from, who authorized it and what was done to it.

  • Data residency

    A requirement or commitment that data is stored and processed in a specific country or region.

  • Data sovereignty

    The principle that data is subject to the laws of the country or region where it is collected or stored.

  • Data steward

    The person responsible for the quality, documentation and appropriate use of a dataset.

  • Data trust

    A legal structure in which independent trustees manage data on behalf of beneficiaries.

  • Dataset

    A defined collection of data assembled for a purpose, such as training or evaluating a model.

  • Dataset card

    A short document describing a dataset: contents, sources, collection, preparation, intended uses and limitations.

  • Dataset licensing

    Licensing a specific, defined dataset rather than ongoing access to a system.

  • Datasheet for datasets

    A structured questionnaire, proposed by Gebru and colleagues in 2018, for documenting a dataset's motivation, composition, collection and uses.

  • Diarization

    Identifying who spoke when in an audio recording, separating speakers into labeled turns.

  • Differential privacy

    A mathematical technique that adds carefully measured noise to data or results so individuals cannot be singled out.

E

  • Egocentric video

    Video recorded from a person's point of view, usually with a head-mounted or body-worn camera.

  • Embeddings

    Lists of numbers that represent the meaning of text, images or other data so similar items sit close together.

  • Enterprise AI

    AI systems built for or deployed within organizations to perform business tasks.

  • Enterprise data

    Data an organization generates while operating: communications, transactions, documents, tickets, code and workflows.

  • ETL

    Extract, transform, load: moving data out of source systems, cleaning and reshaping it, and loading it somewhere new.

  • Eval set

    A collection of examples used to measure model performance, kept separate from training data.

  • Exclusive license

    A license where the owner agrees not to license the same data to anyone else within an agreed scope.

  • Expert determination

    The HIPAA method where a qualified statistical expert certifies that the risk of identifying individuals is very small.

F

  • Field of use

    A contract term limiting a license to specific purposes, products or industries.

  • Fine-tuning

    Further training of an existing model on a smaller, focused dataset to improve it for a task or domain.

G

  • Golden dataset

    A carefully verified set of examples with trusted correct answers used as a benchmark.

H

  • Held-out data

    Data deliberately kept out of training so it can test whether a model generalizes.

  • Human data

    Data created by people rather than generated by models, including expert work products and human judgments.

I

  • Indemnification

    A contract promise by one party to cover the other's losses if certain things go wrong, such as a third-party claim.

  • Instruction tuning

    Training a model on instruction and response pairs so it follows requests well.

K

  • K-anonymity

    A privacy measure where each record is indistinguishable from at least k−1 others on identifying attributes.

  • Knowledge base

    A collection of articles, guides and answers a company maintains so customers or staff can solve problems themselves.

L

  • Lawful basis

    One of the six legal grounds under GDPR that permit processing personal data, such as consent, contract or legitimate interests.

  • Legitimate interest

    A GDPR lawful basis that allows processing when a company's interest is balanced against, and not overridden by, individuals' rights.

M

  • Minimum guarantee

    A fixed amount a buyer agrees to pay regardless of how much revenue share or usage fees would otherwise produce.

  • Model evaluation

    Measuring how well an AI model performs on defined tasks.

  • Most-favored-nation clause

    A promise that a party will receive terms at least as good as those given to others.

  • Multimodal data

    Data combining more than one type, such as text with images, audio or video.

N

O

  • OCR

    Optical character recognition: software that turns text in scans, photos or PDFs into machine-readable text.

  • Operational data

    Records of how a business runs day to day, such as work orders, tickets, approvals and process logs.

  • Opt-out

    A choice that lets a person stop a company from using their data for a particular purpose.

P

  • Personally identifiable information

    Information that can identify a person directly or in combination, such as names, emails, account numbers, faces or voices.

  • PHI

    Protected health information: health details tied to an identifiable person, such as diagnoses, treatment notes, claims or appointment records.

  • PII detection

    Automated scanning that finds personal details, such as names, emails, phone and account numbers, in data.

  • Post-training

    Training steps after pretraining that shape a model's behavior, such as instruction tuning and reinforcement learning.

  • Preference data

    Examples where people compare two or more model responses and pick the better one.

  • Pretraining

    The first, large-scale stage of training a language model on broad text to learn general patterns.

  • Process supervision

    Training that rewards each correct step in a model's reasoning, rather than only the final answer.

  • Proprietary data

    Data a company owns and controls that is not publicly available.

  • Pseudonymization

    Replacing direct identifiers, such as names, with codes so records no longer point to a person without extra information.

R

  • Re-identification

    Linking supposedly anonymous data back to a specific person, often by combining it with other information.

  • Real-world data

    Data collected from actual activity rather than simulated or generated.

  • Red teaming

    Deliberately testing an AI system by trying to make it fail, misbehave or reveal information it should not.

  • Redaction

    Removing or masking sensitive information, such as names, account numbers or addresses, from a record before it is shared.

  • Reinforcement learning

    A training approach in which a model learns by receiving rewards or penalties for its actions.

  • Retention policy

    A company's rules for how long each type of record is kept and when it is deleted.

  • Retrieval-augmented generation

    RAG: an AI technique where a model looks up relevant documents at answer time and uses them to write its response.

  • Revenue share

    A payment model where the licensor receives a percentage of revenue tied to the licensed asset.

  • Reward model

    A model trained to score responses by how well they match human preferences or task success.

  • RL environment

    A simulated setting where an AI agent takes actions, receives feedback and learns through reinforcement learning.

  • RLAIF

    Reinforcement learning from AI feedback: using an AI model's judgments in place of, or alongside, human feedback.

  • RLHF

    Reinforcement learning from human feedback: training a model using human preference judgments.

S

  • Safe Harbor de-identification

    The HIPAA method that de-identifies health data by removing 18 specified identifiers and confirming no actual knowledge of re-identification.

  • SOP

    Standard operating procedure: a written, step-by-step description of how a team does a recurring task.

  • Speech-to-text

    Software that converts spoken audio into written text.

  • Standard contractual clauses

    Template contract terms approved by the European Commission for transferring personal data from the EU to other countries.

  • Sublicense

    Permission for a licensee to grant some of its rights to third parties.

  • Supervised fine-tuning

    Fine-tuning with labeled input and output examples showing the desired response.

  • Synthetic data

    Data generated by models or simulations rather than collected from real activity.

T

  • Ticket data

    Records from help desk or issue tracking tools: requests, conversations, status changes, assignments and resolutions.

  • Token count

    The number of tokens in a dataset or text, used to estimate size and cost.

  • Tokens

    The small chunks of text, often word pieces, that language models read and produce.

  • Tool-use data

    Examples of a model or person calling tools, such as search, APIs or calculators, and using the results.

W

  • Warranty of title

    A seller's promise that it owns, or has the right to license, what it is providing.

See if your company qualifies