Rights and contracts
Master data license with dataset schedules: structuring recurring deliveries
By SourceX Editorial · Reviewed by Noah Loul ·
Short answer
A master data license agreement sets the terms that apply to every dataset once, such as permitted use, confidentiality, security, liability and termination, while each dataset schedule defines one package: records, date range, exclusions, delivery cadence and fees. The rule of thumb: anything that changes between datasets or deliveries belongs in the schedule.
Key takeaways
- Negotiate legal risk once in the master license and commercial scope separately in each dataset schedule.
- A dataset schedule should describe records by system, record family, date range and exclusions.
- Recurring deliveries need their own rules for cut-off dates, schema changes, acceptance and pausing.
- An order of precedence clause decides what happens when a schedule conflicts with the master.
- Every delivery should carry its own release approval, even under a signed schedule.
What is a master data license agreement?#
A master data license agreement is a framework contract that sets the legal terms for every dataset a supplier licenses to one buyer, with each dataset added through a short schedule or order form. The structure borrows from master services agreements with statements of work, adapted to records instead of services.
The framework suits suppliers who expect more than one package or more than one delivery: a software company adding later years of support tickets, a distributor sending quarterly order exceptions, a consulting firm adding project reviews after a first archive. Counsel negotiates liability, indemnity and security once, and later packages move at the speed of a scope discussion.
A single-purpose license remains the simpler choice for a one-time archive with no follow-on in view. Building a framework that never receives a second schedule only lengthens the first negotiation.
What belongs in the master and what belongs in each schedule#
The dividing line between master and schedule is stability. Terms that should not change from one dataset to the next live in the master license; terms that describe a particular package, its deliveries or its price live in the schedule.
Read the table as the contract's map. If a draft puts a schedule item in the master, every future dataset inherits it; if it puts a master item in a schedule, that protection can be renegotiated on every order.
| Term | Master license | Dataset schedule |
|---|---|---|
| License grant | Grant structure; data licensed, not sold; ownership stays with the supplier | Which permitted uses apply to this dataset |
| Permitted use | Definitions of training, evaluation, research and internal use | Uses selected and any added limits |
| Restrictions | No re-identification, no resale, no redistribution of raw records | Dataset-specific exclusions |
| Confidentiality and security | Confidentiality terms and the security schedule | Storage region or extra controls for sensitive packages |
| Privacy | Data processing addendum and preparation standard | Privacy preparation record for this dataset |
| Risk allocation | Warranties, indemnities and liability caps | Changed only by express override |
| Term and termination | Master term, termination rights, survival | Schedule term, renewal and end-of-term deletion |
| Commercials | Invoicing, taxes, payment mechanics, audit | Fees, payment triggers and any exclusivity |
- 01Your work records
- 02Personal details removed
- 03You approve the release
- 04Licensed to AI developers
What a dataset schedule should describe#
A dataset schedule should describe the package precisely enough that a third party could tell whether a given record is in or out. A label like customer support data invites disputes about what was promised versus what was delivered.
Published metadata standards make a useful checklist. The Data and Trust Alliance's Data Provenance Standards group dataset metadata into Source, Provenance and Use, and the Use group covers items such as confidentiality classification, consent documentation location, privacy-enhancing technologies applied and intended data use.
- Source systems and record families, such as Zendesk tickets linked to Jira issues.
- Date range, plus the cut-off rule for records still open at the boundary.
- Fields included, with a sample schema and approximate volume.
- Exclusions: named customers, client deliverables, privileged material, export-controlled items.
- Preparation applied: what was removed, masked or replaced.
- Permitted uses selected from the master definitions.
- Delivery method, format and cadence.
- Fees, payment triggers and any exclusivity, with its scope and end date.
How to structure recurring deliveries#
Recurring deliveries need rules that a first delivery never tests: what each increment contains, how changes are handled and what happens when a source system changes. Put these rules in the schedule, because cadence and content differ by dataset.
Add a schema change notice: if a field is renamed or a system is replaced, the supplier tells the buyer before the next delivery and either side can adjust or pause. Name what happens if a source system is retired mid-term, such as a final archive delivery and an early end to the schedule without penalty.
Keep a supplier right to pause any delivery over a rights or privacy concern, with fees adjusted rather than a breach declared. Each increment should pass the same release approval as the first, because new records can bring new customers, new contracts and new personal details.
| Delivery model | When it fits | Contract points |
|---|---|---|
| One-time historical archive | A closed or retired system, or a single backfill | Acceptance window and deletion of interim working copies |
| Backfill, then increments | Live systems where both history and new records matter | Cut-off dates, no duplicates, acceptance per increment |
| Periodic full refresh | Records edited after creation, such as reopened tickets | Which version replaces which, deletion of superseded copies |
| On-demand pulls | Buyer requests targeted slices within agreed bounds | Request limits and supplier approval for each pull |
Order of precedence, amendments and new datasets#
An order of precedence clause decides which document wins when the master and a schedule conflict. A supplier-friendly default is that the master controls unless a schedule expressly names the master clause it overrides, which stops a commercial order form from quietly widening permitted use or lifting a liability cap.
Define how new datasets are added: a signed schedule on the agreed form, never a click-through order or an emailed scope change. Decide whether schedules survive termination of the master; a common supplier position is that active schedules continue on master terms until they end, so a dispute over renewal does not cut off a paid delivery.
Watch cross-default. A breach under one schedule may justify suspending deliveries under all of them, but it should not automatically terminate unrelated licenses for data already delivered and paid for.
How fees and revenue timing work across schedules#
Fees work best when each schedule carries its own commercial terms: a fee per delivery, an annual license fee, or milestone payments tied to acceptance. Exclusivity, if offered at all, also belongs in the schedule with a defined scope and end date, because it is the term most likely to differ between datasets.
Revenue timing can follow the structure. Under ASC 606, revenue from a license is not recognized before the licensed IP is made available and the period in which the customer can use it begins, so revenue from a renewal is recognized no earlier than the start of the renewal period. How each schedule is treated depends on its terms, so review the structure with your accountant before signing.
Illustrative: a distributor adds schedules over time#
Illustrative: a fictional industrial distributor runs NetSuite for orders and a separate WMS for fulfillment and returns. Its first schedule covers a historical archive of order exceptions with resolution notes, delivered once from an export the operations team builds.
A second schedule, signed later, covers quarterly increments of the same record family, with a cut-off at quarter end and a rule that reopened exceptions are redelivered with a version flag. A third adds returns and credit memos but excludes two customers whose contracts restrict reuse.
When the distributor migrates its WMS, the schema change notice lets it pause one quarterly delivery, map fields to the new system and resume. None of this reopens the master license, so the general counsel spends review time on scope rather than on liability.
How SourceX structures recurring packages#
SourceX runs each dataset schedule through the SourceX five-step transaction: Supply, Rights, Preparation, Approval and Delivery. Rights and preparation work for a new schedule builds on earlier ones, but each schedule still gets its own review because records, customers and contracts change.
Each package that proceeds is documented in a SourceX Evidence Packet covering provenance, licensing rights, permitted use, the privacy record and release authorization. The supplier approves every step, including each recurring release, so a signed schedule does not turn into automatic sharing.
Frequently asked questions
Is an order form the same as a dataset schedule?
It can serve the same purpose. Some agreements use a short order form for commercial terms and a longer schedule for the dataset description; others combine both. What matters is that the document is signed by authorized people on both sides, references the master and describes the records precisely.
Can a buyer's affiliates sign their own schedules?
Some masters let affiliates sign schedules under the same terms, which saves time with large buyers. If you allow it, make the parent responsible for each affiliate's compliance, list which affiliates qualify and keep your right to decline any schedule.
How long should a master data license run?
A common approach is a master term aligned with the expected relationship, with each schedule setting its own term. Avoid an evergreen master with no review point; a renewal date gives both sides a natural moment to update security and privacy terms.
What happens to delivered data if a schedule ends early?
The schedule should say. Typical options are deletion of that dataset with a certificate, or a continued right to use data already delivered for a defined purpose. Tie the choice to the master's termination clause and to how trained models are treated, which is often negotiated separately.
Should exclusivity sit in the master license?
Rarely. Master-level exclusivity can lock every future dataset to one buyer. Grant exclusivity, if at all, per schedule, scoped to a record family, a field of use or a period, so other packages stay available to other buyers.
Sources
- The Data and Trust Alliance Data Provenance Standards define dataset metadata in three groups, Source, Provenance and Use; the Use group includes confidentiality classification, consent documentation location, privacy-enhancing technologies applied and intended data use. Source
- ASC 606-10-55-58C provides that revenue from a license of intellectual property is not recognized before the IP is made available and the period of use begins, so revenue from a license renewal is recognized no earlier than the start of the renewal period. Source
Related resources
See if your company qualifies
A short company assessment. No data uploads are needed.