Insights
Leadership and readiness
64 guides · page 1 of 2
Data governance for data licensing: a stage-by-stage approval and evidence log
Data governance for data licensing: an eight-stage approval matrix and evidence log showing who signs each stage and what record each approval leaves.
A customer wants their records removed after delivery: what happens?
Remove customer data after licensing by layer: what you can stop in future deliveries, what a licensee must delete, and the clause to sign before delivery.
AI readiness assessment for mid-size companies: what it covers
What an AI readiness assessment for a mid-size company covers: five areas, what each produces, and the data licensing question most assessments skip.
An AI company wants to record your team's workflows: what to consider
An AI company wants screen recordings of your employees at work. A COO's checklist on consent, customer data on screen, trade secrets and who gets paid.
An AI company wants your data free 'for research': what to consider
An AI company wants your data free for research? Check permitted use, publication rights, commercial use creep and deletion. Free does not mean low risk.
An AI startup offered equity or credits for your data: how to evaluate it
Equity for data from an AI startup, or platform credits instead of cash? Convert the offer to a cash-equivalent view, then check rights and exit terms.
Are your SaaS vendors training AI on your data? How to check and opt out
Is your SaaS vendor training AI on your data? Where to look in terms, DPAs and admin settings, how to opt out, and what to document for each system.
Auto-delete settings that quietly erase your company history
Auto delete settings in help desks, chat, email, phone and CRM systems can erase years of business data. Where to look and what to export before it goes.
Can licensed records reveal your customer list?
Licensed records can expose a customer list through account names, email domains and free text. Four controls keep client identities out of the package.
Can sharing trade secrets with a public AI tool waive protection?
Pasting trade secrets into a consumer AI tool can weaken protection. What the reasonable-measures rule means for AI use, and six controls to adopt now.
Can we start with a small data licensing pilot?
A data licensing pilot can work if the scope is narrow: one system, one date range, one permitted use, approval gates and an exit point. Here is how.
Can you keep de-identified records after the retention period ends?
Can you keep anonymized data after the retention period? Often yes, if it meets the applicable de-identification standard. The conditions to check first.
CCPA risk assessments before selling or sharing personal information
When the CCPA risk assessment requirement applies to selling or sharing personal information, what to document, and how de-identification changes it.
Consent records: how to prove you had permission years later
Proof of consent records explained: what a provable record contains, where CRMs, contracts and notices keep it, and how to rebuild a trail for old records.
Contract language that stops vendors training AI on your data
A vendor contract AI training prohibition clause checklist covering embeddings, logs, retention and subprocessors, with sample language counsel can adapt.
Data governance during downsizing: protecting records when teams shrink
Data governance during layoffs: reassign system owners, freeze retention changes, export departing teams' tools and keep admin access before records vanish.
Data licensing partner due diligence checklist
Data licensing partner due diligence for general counsel and COOs: the identity, contract role, custody, security, fee and reference checks to run first.
Data licensing partner vs law firm vs doing it yourself
How to license data yourself, with a law firm or via a licensing partner: compare effort, buyer access, privacy preparation, contracts and payment.
Data licensing policy: rules for when and how your company licenses records
A data licensing policy template outline: scope, a never-license list, the approval chain, a de-identification standard, a licensing register and reviews.
Data licensing project plan template: from fit check to payment
A data licensing project plan with milestones mapped to Supply, Rights, Preparation, Approval and Delivery, plus owners, gates and the steps to payment.
Data map vs data inventory: what's the difference?
Data map vs data inventory compared: what each records, who owns it, where a ROPA fits, and which to build first for privacy, migrations or licensing.
Data minimization vs AI value: do you have to delete old records?
Data minimization for old records targets personal data, not every file. A decision rule for what to delete, de-identify or keep, and how to document it.
Data profile one-pager: how to describe your records without sharing files
A dataset description template for a one-page data profile: systems, date ranges, volumes, fields and exclusions. Metadata only; no files leave the company.
Data release authorization: what to document before records leave your company
A data release authorization template for counsel: the fields to record before licensed records leave, from signer authority to permitted use and exclusions.
Data retention schedule template by record type
A data retention schedule template by record type, with owner, trigger event, disposal method and licensing relevance columns. Periods stay with counsel.
Data sharing risk assessment template for external releases
A scored data sharing risk assessment template covering personal data, confidentiality, competitive sensitivity, contract limits and recipient security.
Documents to gather before a data licensing review
Documents needed for a data licensing review: contracts, privacy notices, employee policies and authority records, why each matters and where to find it.
Does AI readiness work also prepare records for licensing?
AI readiness and data licensing share most of the groundwork. See which inventory, quality, access and governance tasks carry over and what licensing adds.
Does de-identification protect trade secrets?
Does de-identification protect trade secrets? No. Personal data removal and confidentiality review target different content. Run a two-pass review.
Employees selling work files to AI platforms: what employers should do
Employees selling company data to AI platforms put trade secrets and customer data at risk. A policy clause, a detection checklist and a governed alternative.
Fake data marketplaces: how to check if a platform is real
Is a data marketplace legit? Verify its legal entity, executives and address in public records, then read its terms and data requests before you share a file.
Go/no-go criteria for a first data licensing deal
Should we license our company data? Score rights clarity, personal data, competitive sensitivity and capacity to proceed, proceed with exclusions or stop.
How 2025 AI copyright rulings strengthened the case for licensed business data
AI copyright rulings in 2025 put the spotlight on how training data is obtained. What that means for companies that could license their business records.
How CFOs evaluate a data licensing opportunity
How a CFO should evaluate a data licensing opportunity: cash timing, internal cost lines, questions for tax and revenue advisors, and the downside cases.
How to archive a retired system so its records stay usable
How to archive legacy system data before shutdown: keep IDs, timestamps, thread links, attachments and user mapping so old records stay searchable.
How to brief outside counsel on a data licensing opportunity
Brief a lawyer on data licensing with one pack: systems, governing contracts, privacy notices, proposed scope and open questions, so the review stays focused.
How to check an AI company's data security before sharing anything
Evaluate an AI company's data security before you share a sample: storage, access, subprocessors, deletion and breach notice, plus the evidence to request.
How to design a data retention policy that keeps records licensable
Data retention policy design with a licensing question added: a category-by-category table for legal minimums, business value and how to dispose of records.
How to keep a data licensing project confidential inside your company
How to keep an internal project confidential while you explore data licensing: a need-to-know list, a code name, file controls and when to widen the circle.
How to label records as licensable, restricted or excluded
Tag records for data licensing with three labels: licensable, restricted and excluded. Rules, reason codes and examples for Zendesk, Slack, ERP and more.
How to map a business workflow across systems: a quote-to-cash example
Map a business process across systems with a quote-to-cash example: records in CRM, quoting, ERP, fulfillment and service, and the join keys linking them.
How to say no to an AI company that wants your data
Decline a data request from an AI company without burning the bridge: what to write, what never to disclose, and which changes justify revisiting.
Internal approval workflow for sharing company data externally
A data sharing approval workflow template: request, classify, rights check, privacy preparation, approver sign-off and release log, with one owner per lane.
Internal costs to budget for a data licensing project
The cost of a data licensing project, line by line: staff time, legal review, preparation, IT and delivery, and who usually bears each. No made-up figures.
Internal vs external data monetization: which should come first?
Internal vs external data monetization compared for mid-size companies: effort, time to value, risk and governance, plus a sequencing rule a CFO can apply.
Notice vs consent: what's the difference for business records?
Notice vs consent in privacy: notice tells people how records are used, consent asks permission. A comparison table and a decision rule for business records.
Preparing for a buyer's security review as a data supplier
A buyer security review of a data supplier checks policies, access logs, the export process and the de-identification record. Build the evidence pack first.
Questions private company boards should ask about AI and company data
Board questions on AI and company data for private companies, grouped by internal AI use, vendor training, external licensing and retention, with red flags.