Can a company license records it is legally required to keep?

Generally yes, because a license delivers copies under agreed terms while the company keeps its originals. A retention duty requires keeping records, not hiding them; what can restrict licensing is a separate confidentiality or privacy rule attached to certain regulated records.

Does a retention duty stop a license?

Generally no, because a license delivers copies under agreed terms while the company keeps its originals. A retention duty requires the company to keep records for a period. It does not, by itself, forbid sharing a licensed copy. What can restrict licensing is a separate confidentiality rule attached to certain regulated records.

This is general information, not legal, tax or financial advice. Confirm with the company's own counsel or tax adviser before acting; retention periods and confidentiality rules vary by record type and by state.

Retention versus confidentiality: the distinction that matters

Two different obligations get mixed up in this conversation.

ObligationWhat it asksEffect on a license
RetentionKeep the record for a set periodDoes not block licensing a copy; the company must still keep its original
Confidentiality or privacyLimit who may see or use the recordMay restrict or exclude the record, or require de-identification
Contractual confidentialityKeep a customer's information privateNeeds consent or exclusion, as for customer-owned records
Legal holdPreserve records for a disputeDo not alter or delete; consult counsel before any export work

Retention answers "must I keep it?" Confidentiality answers "may I share it?" Only the second can stop a license.

Which record types raise the question

CFOs meet this with several families of records.

  • Tax and accounting files: retained for years; the question is whether they hold third-party personal data that needs redaction.
  • Employment files: retained under employment rules and often full of personal information, so they are usually excluded or de-identified.
  • Industry-regulated records: such as healthcare, financial or safety records, which carry their own confidentiality rules.
  • Contract files: kept for the life of the relationship, often containing counterparty confidentiality terms.

For most companies, the best candidates are internal operational records such as tickets, project histories and internal documents, not the regulated files.

The retention screen: five steps for a CFO

  1. List the record sets the company must retain and note the rule or policy behind each one.
  2. Mark each set as retention-only or also confidential, using the company's own retention schedule.
  3. Hold out anything under a legal hold until counsel says otherwise.
  4. Confirm the company can keep its originals intact; a license never replaces them.
  5. Agree de-identification and redaction rules with SourceX before any work begins.

Step four is the practical heart of the answer. Delivery under a license is of agreed copies after an executed agreement and the company's authorization, and the company continues to hold and retain the originals.

Illustrative example

Illustrative: a 110-person staffing firm must retain payroll and timekeeping records for several years. Its CFO tags those as employment records with personal data and holds them out. The firm lists its internal operations wiki, project management history and sales pipeline as candidates, none of which are subject to special confidentiality rules. Retention does not change the plan, only the record selection.

What a fractional CFO can say

Adjacent questions come up in the same meeting: records in dispute are covered in ownership disputes, regulator orders in FTC consent orders, certifications in SOC 2, and distributed teams in fully remote companies. The role overview is on the fractional CFO page.

When to pause

  • Records are under a legal hold.
  • The sets are mainly protected personal or health information with no authorization.
  • Nobody can say whether a regulator or contract restricts sharing.
  • The sponsor wants to delete records after licensing them.

How rewards work

Partners earn 25% of the eligible platform fees SourceX actually collects from the referred company's licensing deals, capped at $100,000 per referred company, payable only after the buyer pays and SourceX receives its fee. No reward is guaranteed. Check your own engagement terms before accepting any fee tied to a client.

Next step

Screen the company using the company fit checker and the baseline at who qualifies, then register as a partner.

  1. Step 1Share your linkSend your personal link to a company you know.
  2. Step 2Company appliesThe company applies itself at /apply.
  3. Step 3Buyer selects and paysThe buyer selects and pays for the data and SourceX receives its fee.
  4. Step 4You get your rewardYour share of SourceX fees becomes payable.

Common questions

Does a retention requirement stop a company from licensing records?

Not by itself. Retention means keeping the original for a period. A license delivers an agreed copy, so the company can usually do both. Separate confidentiality or privacy rules attached to certain records may still limit what can be shared.

Can the company delete records after licensing them?

It should not delete anything it is required to retain, and a license does not change that. Retention schedules and any legal holds continue to apply to the originals regardless of the license.

What about records under a legal hold?

Treat them as off limits until counsel confirms. A hold exists to preserve records for a dispute, and altering, exporting or redacting them without advice can create problems.

Are tax records good candidates for licensing?

Often not the best ones. They are retained for long periods but may contain third-party personal data. Operational records such as tickets, project histories and internal documents are usually stronger candidates.

Who decides which retained records can be shared?

The company decides, with its own counsel or advisers, and agrees redaction rules with SourceX before any work begins. A referral partner makes the introduction only and never handles the records.

Free resources

By SourceX Partnerships Team · Published 2026-10-09 · Updated 2026-10-10

Know a US company with valuable proprietary data?

Become a referral partner from anywhere we support, get your link and introduce an owner or authorized decision-maker.

Refer a company →

I own a business

Explore licensing your company's data to AI developers worldwide. Start a short assessment; no uploads needed.

Start an assessment