When employees are paid by a management company, which entity owns the records?

When staff are employed by a management services organization (MSO) while a separate professional entity holds licenses and patient or client relationships, ownership of records usually splits. The management services agreement, the employment arrangements and the system contracts decide which entity owns what, so map payroll, software contracts and signing authority before introducing either entity.

The short answer: ownership splits, and the documents decide

When staff are on a management services organization's payroll while a separate professional corporation or PLLC holds the licenses and the patient or client relationships, there is rarely one entity that owns everything. In the common pattern, the MSO holds the operational records its own employees create, and the professional entity holds clinical or client files. The management services agreement, the employment arrangements and the software contracts settle the details.

This page helps operating partners work out which entity is in play before anyone talks to SourceX. It applies to physician, dental, veterinary, accounting and law-firm roll-ups, and to holding companies that pay staff for several operating subsidiaries.

How an MSO structure divides people, systems and records

LayerTypical homeRecords it generatesLicensing note
Non-clinical staff: front desk, billing, call center, HR, finance, ITMSO payrollScheduling workflows, revenue-cycle tickets, call logs, finance and HR records, IT service deskOften the cleanest candidate, subject to the management agreement
Licensed professionals: physicians, dentists, veterinarians, CPAs, attorneysProfessional entity, sometimes as contractorsClinical notes, professional work product, sign-offsBound by professional rules and patient or client confidentiality
Patient and client filesProfessional entityCharts, treatment plans, engagement filesMainly PHI or client-confidential; a red flag unless authorized or de-identified
Software contracts: practice management or EHR, Microsoft 365, CRM, ticketingWhichever entity signedHosted history and admin accessThe signer controls exports, which is not the same as ownership
Management services agreementBetween the twoAllocation of data, IP and confidentialityThe first document counsel should read

The table shows a common pattern, not a rule. Some sponsors put clinicians on the MSO payroll; some professional entities sign their own software contracts. The structure chart and the agreements decide.

Why the payroll entity matters for ownership

The employer is the natural starting point because of how US copyright treats work done on the job. The Copyright Office's Circular 30 on works made for hire explains that when an employee prepares a work within the scope of employment, the employer, not the individual, is the author and owner. Work by independent contractors is different: it counts as a work made for hire only in specific categories and under a signed written agreement.

So SOPs, call-handling scripts, billing appeals and IT tickets written by MSO employees generally start out as the MSO's work, unless the management services agreement allocates them differently. Notes written by a clinician who contracts with the professional entity may belong to neither entity unless an agreement assigns them.

Patient records add a second layer. HHS guidance describes two ways to meet the HIPAA de-identification standard: Expert Determination, where a qualified expert documents that re-identification risk is very small, and Safe Harbor, which removes 18 specified identifiers; information de-identified either way is no longer protected health information (HHS de-identification guidance). Records that are mainly PHI, without HIPAA authorization or de-identification, are a red flag for any introduction, and redaction requirements are agreed with the company before any work begins.

This is general information, not legal, tax or financial advice. Confirm with your own counsel before acting.

The payroll-to-signature map: four questions before you introduce

  1. Who employs the people who create the records? Name the entity on the employment agreements and the one that directs the work. A common paymaster or professional employer organization may run payroll without being the entity whose records these are.
  2. Who signed each system contract? List the practice-management or EHR system, email and file storage, CRM, ticketing and finance tools, and the entity named on each order form.
  3. What does the management services agreement say about data? Look for clauses on ownership of records, IP created under the agreement, confidentiality and what happens to data at termination.
  4. Who can sign for the entity that owns the records? That may be the MSO's CEO or CFO, an owner-professional of the professional entity, or both, plus any approvals the sponsor's governance documents require.

When the answers point to one entity, introduce that entity. When they point to both, both need to be aligned before anything moves.

On headcount, do not combine or net figures yourself. Describe how people are employed across the entities, and SourceX checks the size test, 50+ full-time employees at peak (contractors excluded), during qualification. The who qualifies page covers the rest: a multi-year operating history on record, clear rights to the material and a sponsor who can bind the entity.

How the map plays out in common roll-ups

StructureLikely starting pointWhat to confirm first
Physician or dental MSOThe MSO's operational records: revenue cycle, call center, scheduling, HR, ITThe data clause in the management agreement, and that clinical charts stay out unless lawfully de-identified
Veterinary groupThe management company's operational recordsWhich entity signed the practice-management software and controls its exports
Accounting firm with an alternative practice structureThe services company's own operational recordsThat attest client files stay with the CPA firm and client confidentiality holds
Law firm with an MSOThe MSO's administrative, IT and finance recordsThat client files and privileged material stay out entirely
Holding company paying staff for several subsidiariesEach subsidiary that ran the systems and directed the workWhich entity holds the system contracts, and whether records separate cleanly by subsidiary

In a roll-up, some records predate the MSO because they came from acquired practices. Whether that older history counts is covered in does a predecessor company's history count toward operating years?

What to say to the portfolio CFO

Once you know which entity you are describing, the company fit checker gives a quick, non-binding read. Operating partners screening several platforms can plan the wider pass with referral opportunities for private equity operating partners.

Next step

Map the entity first. Then register as a partner and introduce the entity that owns the records, or send its CEO or CFO your referral link to sourcex.si/apply.

  1. Step 1Share your linkSend your personal link to a company you know.
  2. Step 2Company appliesThe company applies itself at /apply.
  3. Step 3Buyer selects and paysThe buyer selects and pays for the data and SourceX receives its fee.
  4. Step 4You get your rewardYour share of SourceX fees becomes payable.

Common questions

Can the MSO license records without the professional entity agreeing?

Only if the records are clearly the MSO's and the management services agreement gives the professional entity no say. Operational records such as call logs and billing tickets often mention patients, clients or clinicians, so the professional entity usually has an interest in how they are redacted. Aligning both entities before the introduction avoids a stalled rights review later.

Do employees leased through a PEO count toward the 50+ full-time employees?

Describe the arrangement plainly and let SourceX confirm it during qualification. The baseline is 50+ full-time employees at peak, and contractors are excluded. Explain who directs the staff, who signs their employment agreements and which entity the PEO serves, rather than adding or removing people from the count yourself. Qualification turns on the facts, not on how payroll is labeled.

Are de-identified patient records ever part of a license?

Only where the company has a lawful basis and the de-identification standard is met; HHS describes two methods, Expert Determination and Safe Harbor. Operational records such as scheduling, billing workflows and call-center history are a simpler starting point because they can be scoped without clinical content. Redaction and de-identification requirements are agreed with the company before any work begins.

Who is the authorized sponsor when two entities are involved?

The sponsor is whoever can bind the entity that owns the records: an owner, CEO, CFO or another authorized representative. If the records belong to the MSO, its officers act under its governance documents and any approvals the private equity sponsor requires. If the professional entity holds part of the rights, its owner-professional needs to agree too. SourceX confirms rights and authority during qualification.

Does a recently formed MSO have enough history to qualify?

It may, if the records it holds go back further than the entity itself. When practices were acquired and their systems moved into the MSO, the age of those systems can matter more than the MSO's formation date, provided the purchase documents moved the rights. The baseline still asks for several years of documented operations, which SourceX confirms during qualification.

Free resources

By SourceX Partnerships Team · Published 2026-10-09 · Updated 2026-10-09

Know a US company with valuable proprietary data?

Become a referral partner from anywhere we support, get your link and introduce an owner or authorized decision-maker.

Refer a company →

I own a business

Explore licensing your company's data to AI developers worldwide. Start a short assessment; no uploads needed.

Start an assessment