Can an IT provider share client data for AI licensing?

Does admin access let an IT provider license a client's data?

No. Administrator access lets a provider operate a client's systems; it does not give the provider the right to license what is inside them. Only the company itself, acting through an authorized sponsor such as the owner, CEO, CFO or another authorized representative, can agree a data license with SourceX. The provider's role is an introduction plus basic fit information.

That distinction is the whole answer, and it protects you as much as the client. A provider who treats a global-admin login as permission to discuss, export or describe records puts the client relationship, the managed services agreement at risk.

Why access and authority are different things

Access is a technical fact: a credential, a role in a directory, a seat in a backup console. Authority is a legal and commercial fact: who owns the records, who may grant a license, and who signs. A client's IT administrator can often read every mailbox and shared drive and still have no say over what the company does with them.

Three layers usually sit between a login and a license.

• Ownership of the records. Much of what sits in a client's tenant belongs to the client, and some of it belongs to the client's own customers, who gave it under their own contracts.
• Contract terms. Your managed services agreement probably limits what you may do with client information to delivering the services. A license to an AI buyer is not delivering the services.
• Sponsor approval. A license is signed by someone who can bind the company. A help desk contact or an IT manager typically cannot.

For a view on how the MSP revenue picture fits around this, the additional revenue streams for MSPs guide covers where introductions sit next to managed services.

Who can authorize a SourceX license?

Only the company's authorized sponsor. SourceX qualifies each company on size, history, data breadth and rights, and nothing is binding until the company agrees price and terms and signs. The company keeps ownership; data is licensed, not sold.

What a provider may and may not do

The partner side of the program is deliberately narrow: you make an introduction and give basic fit information. You never export, upload or describe confidential records.

Fine to do:

• Tell the sponsor that a licensing program exists and offer an introduction.
• Share non-confidential fit facts the sponsor would already tell a stranger: rough headcount, years in operation, the kinds of systems in use.
• Send the referral link or submit the company through the referral form once the sponsor agrees.

Do not do:

• Pull a sample of tickets, mail or files "to show what they have".
• Describe what is in a client's records, even in general terms, without the sponsor's say-so.
• Sign, click through or accept anything on a client's behalf.
• Mention SourceX as if the client has already agreed.

What to say to the sponsor

Keep the first message about the idea, not the data.

If the sponsor asks whether you can "just check what we have", the honest reply is no: the company completes its own data inventory after SourceX qualifies it. The data inventory builder is a planning aid the company can use itself.

What if the concern is valid?

Sometimes the hesitation is correct. Stop and do not introduce the company when any of these is true.

1. The records belong to the client's clients, and no consent exists.
2. The sponsor cannot be reached, or the only contact is another IT vendor.
3. Your contract bars you from referring or from discussing client information, and you have not asked the client in writing.
4. The data has already been licensed for AI training, or the company has fewer people than the baseline of 50+ full-time employees at peak (contractors excluded).

The same boundary applies to provider-owned records. Your own ticket history is yours to consider, but client environment data inside it is not. The HaloPSA brief and ConnectWise PSA brief show where that line falls inside a PSA.

How rewards work

Partners earn 25% of the eligible platform fees SourceX actually collects from the referred company's licensing deals, capped at $100,000 cumulative per referred company. Rewards become payable only after the buyer pays and SourceX receives its fee; a lead, meeting or signed agreement alone does not trigger payment. No reward is guaranteed. If you advise clients under professional or contractual duties, check your own agreements on referral fees and disclosure. This is general information, not legal, tax or financial advice.

Next step

Start with the clients where you already speak to the owner or CFO, not the ones where you only see the console. Register as a partner, then use the network opportunity finder to list which of your relationships reach a sponsor. Companies that prefer to go direct can apply at sourcex.si/apply. For the company-side basics, see who qualifies and the MSP partner overview.