A permission log for investor-led company introductions: a source-date-scope register with one row per yes, and a send rule that passes on only what every row allows

Short answer

An investor-led introduction usually rests on several permissions, not one. The person who owns the relationship agrees to an ask, the CEO agrees to an introduction, and the CEO decides what may be shared and whether your fund can be named. Log each as its own row: who agreed and in what role (source), when and with what written evidence (date), and exactly what it covers and leaves out (scope). Send SourceX only what every active row allows, and stop the chain when anyone withdraws.

Visual briefFull-size diagram
Four stacked permission cards for one Illustrative company, from the LP relationship owner, the COO, the CEO and the CEO-named CFO, each showing a date and the scope it grants, feeding one introduction card that carries only what every active card allows.
Illustrative register for an invented 230-person title insurer; dates, roles and scopes follow the worked example on this page.

The register below is for VC operating partners, platform leads and fund partners who introduce companies to SourceX. We checked every program fact against three SourceX documents on 26 October 2026: the terms (Version 2026-10-22.2, since replaced by version 2026-11-04), the unsigned sample agreement and the screening page. The register's fields, codes and send rule are this page's own method.

The founder's question, and the permissions hiding behind it

The founder hears a single question: would you like an introduction to SourceX? Behind it sit up to five permissions, often from different people, and a log that records only "CEO said yes" loses four of them.

CodePermissionWho can give itTypical evidence
P1 RaiseTo bring SourceX up with the CEO at allWhoever owns the relationship: an LP, a co-investor, a portfolio founder or the board memberA short message from that person
P2 IntroduceTo introduce the company to SourceXThe CEOAn email from the CEO
P3 DescribeTo tell SourceX named metadata: record types, years, systems, rough headcountThe CEO, or a sponsor the CEO namesThe CEO's email listing the facts, or approval of your draft
P4 Name the fundTo say the introduction comes through your fund or board seatThe CEOA line in the same email
P5 Report internallyTo record the introduction in the fund's own tracker or LP updatesThe CEO, plus your fund's policyThe CEO's email and a compliance note

P5 is the easiest to miss, because it concerns the fund's own paperwork rather than the introduction. A CEO who welcomes a quiet introduction may not want the company named in a report that LPs read.

Why a written chain matters to the program

The terms decide attribution from dated records, including written introduction evidence, existing applications and earlier relationships, and an earlier link click alone does not decide credit. Within the 90-day attribution window, the earliest valid introduction of a company that is new to SourceX earns the credit, which attaches when that company submits a verified application; only one partner can hold it per company. The sample Channel Partner Agreement adds a rule on form: an introduction must be recorded in writing, such as a portal submission, an email or a mutually acknowledged introduction log, and an oral one has to be confirmed in writing before its protection attaches. Apply the same discipline upstream, so a yes on a call becomes a row only once it is confirmed in writing.

For what each row should hold, the UK Information Commissioner's Office offers a sound skeleton. Its guidance on recording consent, paraphrased, asks for who consented, when, what they were told, how and whether and when they withdrew. Most permissions in a business introduction are not consent in the data-protection sense, and this register is not a compliance tool, but the items transfer well. The register adds two fields: the role a person acted in and the boundary of what they allowed.

FieldWhat to writeWhy it earns a column
Row and company codeA code rather than the company name in any shared viewThe register itself should not reveal a confidential conversation
Source and roleName, and the capacity in which they agreed: relationship owner, CEO, CEO-named sponsor, fund complianceSeparates personal interest from company authority
Asked by and wordingWho asked, with a copy of the message or call script usedShows what the person was actually agreeing to
Date and evidenceThe date of the yes and a link to the email, or a call note confirmed by emailDated records decide attribution
Scope grantedThe codes P1 to P5 this row coversDefines what may travel
Scope excludedAnything the person ruled out, in their own wordsExclusions vanish when notes get summarized
Refresh triggerWhen the row must be asked again: a new CEO, a sale, a pause longer than 90 daysA permission belongs to its moment
StatusActive, interest only, narrowed, declined or withdrawnLets the send rule run mechanically

Worked register (Illustrative). An invented 230-person regional title insurer whose CEO is known to one of the fund's LPs. Every name, date and scope is made up.

RowSource and roleDateEvidenceScope grantedScope excludedStatus
1LP principal, relationship owner2026-09-02EmailP1Leave the LP's own stake unmentionedActive
2COO, personal interest2026-09-09Call note confirmed by emailNoneNot the CEOInterest only
3CEO2026-09-16EmailP2, P3Do not name the fund (P4 refused)Active
4Fund compliance2026-09-17Internal noteP5, platform tracker onlyNo LP reportActive
5CFO, sponsor named by the CEO2026-09-18CEO email naming herP3, record types and years onlySystems list stays outNarrowed

Read the rows together and the send is small: an introduction to SourceX (row 3), with record types and years (rows 3 and 5), without the fund's name (row 3) and without the systems list (row 5). The COO's enthusiasm in row 2 unlocks nothing, and the LP's stake never comes up.

Method note. The five codes and eight fields come from the program terms and the sample agreement's introduction-record rules, read on 26 October 2026, with the ICO's consent-record items as a model. They describe what to record; they do not measure whether any permission was freely given or whether the company will fit.

Interest, authorized sponsorship and a decline, as chains (Illustrative)

The same register handles the three answers a founder can give. Illustrative, with invented companies.

ChainWhat happenedRows that resultWhat may be sent
Interest onlyA portfolio CTO says "let's do it" at a dinner; the CEO has not heard of itOne row, interest onlyNothing; the CTO may raise it with the CEO
Authorized sponsorshipThe title insurer above: LP agrees, CEO agrees with limits, CFO narrows the metadataFive rows, three active, one narrowedThe intersection described above
Voluntary declineAn LP agrees to the ask; the CEO of a 120-person staffing firm says noTwo rows, the second declined with no reasonNothing, and nobody asks again unless the CEO raises it

A fourth chain is a withdrawal. Suppose a CEO agrees on 1 October and writes on 12 October, before the introduction goes out, asking you to hold off until an audit finishes. The row turns to withdrawn and nothing is sent; the refresh trigger is the CEO's own next message. If the introduction has already gone, tell SourceX the CEO asked for a pause. The company controls its own application from there.

A founder's interest is a row; company authority is another

The interest-only status exists because enthusiasm and authority often sit with different people. SourceX's rules leave two things to the CEO, authorizing a licensing discussion and signing for the company, and where an owner runs the business that owner is usually the CEO. An investor relationship supplies neither the CEO's permission nor the company's authority: SourceX's screening page separates a board seat from the authority to open this discussion, and it counts introductions made without the decision maker's knowledge among the usual poor fits. If the relationship owner in row 1 sits on the company's board and could share in a reward, the disclosure steps in whether a board member can earn a referral reward come first.

Rows also cannot make a company fit. The fit checks belong to the company: a peak of 50 or more full-time employees, not counting contractors; years of records it produced itself; the rights to license them; and an authorized contact. Companies in the U.S., Canada and the EU qualify, as do companies in the UK, Australia, New Zealand, India, Singapore, South Africa, Latin America, the UAE and Saudi Arabia when at least 70% of the data is in English. A funding round is not among the checks, and whether the records suit SourceX's current data needs is settled only in its review.

The send rule: pass on the intersection, then log the introduction

  1. List the active rows for the company and ignore interest-only, declined and withdrawn ones.
  2. Keep only what every needed row allows: P2 from the CEO, P3 from the CEO and from any sponsor who narrowed it.
  3. Strip anything any row excluded.
  4. Ask the duplicate question: has the company ever applied to, opened an account with or exchanged emails with SourceX? The terms treat any earlier application, relationship, lead, account or email correspondence as a duplicate that is not credited to a later partner.
  5. Send, then record what the agreement's introduction record names: company, domain, partner, opportunity, introduction method and timestamps.

Nothing in any send comes from board materials or investor reporting, and nothing is a file, sample or login; the sample agreement gives a partner no authority to share a supplier's records, raw data or personal information. The log's last precondition sits with the submitter, who signs the SourceX Channel Partner Agreement before any send; a copy signed while the document was titled Channel Partner Non-Circumvention and Non-Disclosure Agreement remains binding as written. To measure how long the chain takes once the CEO agrees, pair this register with the time from permission to a qualified introduction.

Keep the register small, private and dated

  • Readers. Only the people who make or approve introductions open it, not the whole deal team or the LP base.
  • Contents. Names, roles, dates, scope codes and links to evidence. No company records, and no figures from board packs or investor reporting; what a board observer can learn explains why.
  • Retention. The sample agreement's return-and-deletion clause excepts records needed for reward accounting and dispute evidence. That is a sensible horizon for the register: keep a row while a credit, reward or dispute could depend on it, then delete it.
  • Personal data. The register names people. The data-protection rules your fund already follows apply to it, including for EU and UK contacts.

Where a permission log misleads

  • A logged yes is not proof the yes was free. A row records that someone agreed, not whether a board relationship pushed them.
  • Rows go stale. A new CEO, a sale or a long pause empties a permission of meaning; the refresh trigger exists for that.
  • Rows written later drift. A note made a week after a call records memory, so write it the same day and send it for confirmation.
  • It is not legal advice. Whether data-protection consent rules reach a given contact is a question for the fund's counsel.
  • A perfect log creates no demand. SourceX checks relevance to its current data needs and the company's rights in review, records belonging to customers are usually not a fit, and a well-documented company can still be declined.

To test the register, track per quarter the share of introductions whose rows were complete before sending and the number of rows corrected afterwards; SourceX has published no benchmark for either. For the platform team's place in the program, see the overview for venture platform teams, and for the request itself, asking a business owner for permission.

Next step

Refer a company. No cap on rewards. Default reward on a company's first qualifying transaction: the greater of $50,000 plus 5% and 15% of Actual Supplier Payout, with no cap; further qualifying transactions first agreed within 12 months of the first Closing pay 15%. Eligibility and payment conditions apply, including the USD 100,000 Minimum Transaction, and a signed Schedule A or addendum can differ. A lead, meeting or signature alone does not trigger payment.

Once every row a send depends on is active and confirmed in writing, set up your partner link through registration, run the company past who qualifies, and reread the program terms before anything leaves the log.

Keeping a permission log is part of making referrals; deciding whether SourceX merits a look as an investment is a different exercise, and an investor who wants to make it can request materials from the SourceX investor overview.

This article is for information only and is not an offer to sell or a solicitation of an offer to buy securities. Any offering by SourceX is made only to verified accredited investors through its offering documents.

  1. Step 1Share your linkSend your personal link to a company you know.
  2. Step 2Company appliesThe company applies itself at /apply.
  3. Step 3Company signs and is paidThe company signs, delivers its data and is paid by SourceX under its agreement.
  4. Step 4You get your rewardthe greater of $50,000 plus 5% and 15% of the actual supplier payout, with no cap. A reward becomes payable after SourceX has paid the referred company under its signed agreement and the payout conditions in the program terms are met, including finance approval and your tax and payment details.

Common questions

Does a yes given on a call count as a row?

Treat it as a draft. Confirm it by email with the scope in your own words and wait for the reply before you act on it. The sample Channel Partner Agreement handles oral introductions the same way: they need written confirmation before its protection attaches.

Should the LP or co-investor who owns the relationship be the registered partner?

Settle it in writing before anyone contacts the CEO. Only one partner is credited per company, so the register should show who will submit and that the relationship owner agreed to that arrangement.

What happens to the log when the CEO leaves?

Flag every row that rests on the departed CEO for refresh. A new CEO has agreed to nothing yet, so ask again before any further step and keep the old rows as history.

Sources

  1. refer.sourcex.si/terms
  2. sourcex.si/documents/partner/SourceX_Channel_Partner_Ag…
  3. ico.org.uk/for-organisations/uk-gdpr-guidance-and-resou…
  4. refer.sourcex.si/who-qualifies
  5. sourcex.si/investors

Free resources

Know a company with valuable proprietary data?

Become a referral partner, get your link and introduce the company’s CEO (in an owner-run company, usually the owner). Referral partners can join from most countries. We can't work with partners in countries or regions under U.S. sanctions or on U.S. restricted-party lists. The companies you introduce should be based in the U.S., Canada and the EU, or in the UK, Australia, New Zealand, India, Singapore, South Africa, Latin America, the UAE and Saudi Arabia with at least 70% of their data in English.

Refer a company →

I own a business

Explore licensing your company's data directly to SourceX for AI training and evaluation. Start a short assessment; no uploads needed.

Start an assessment