Does licensing company data waive trade secret protection?
Not automatically. Trade secret status depends on whether the owner takes reasonable measures to keep the information secret and whether it derives value from not being generally known. Sharing under confidentiality terms is a normal way to keep secrecy, but handing true secrets to a buyer without protection can put the status at risk. The safe approach is to exclude real crown-jewel secrets from scope and license workflow records under confidentiality terms, decided with counsel before anything is scoped. This is general information, not legal, tax or financial advice. Confirm with your own counsel before acting.
What does trade secret law look for?
Under the federal Defend Trade Secrets Act and most state laws, information qualifies as a trade secret when two things are true: the owner has taken reasonable measures to keep it secret, and the information has independent economic value from not being generally known or readily ascertainable. Exact wording varies by statute and state, and this page does not quote the statutes, so counsel should read the definitions that apply to the company.
The business consequence is practical. Secrecy is a set of behaviors: access limits, confidentiality agreements, marking, need-to-know sharing. A license that moves information to a third party is consistent with secrecy only when the controls travel with it.
What is the 3-bucket sort for a company's records?
Use it before scoping. The company's team and counsel, not the partner, decide the buckets.
| Bucket | What it holds | Posture |
|---|---|---|
| Crown jewels | Formulas, source code core, pricing algorithms, unreleased roadmaps, customer lists the company treats as secret | Exclude from the license |
| Protected but shareable | Process records, decision logs, anonymized workflow data, internal SOPs | License only under confidentiality terms and after redaction |
| Not secret | Marketing material, published documentation, public filings | Low concern, but low value to buyers |
Most strong licenses are built from the middle bucket. Buyers want how work gets done, not the formula that differentiates the company.
How do reasonable measures show up in a license?
The agreement and the delivery process should demonstrate secrecy habits, not erode them.
- Scope. Name excluded categories explicitly so crown jewels are never in a delivery.
- Confidentiality. Require that the recipient treat licensed material as confidential and limit access to those who need it.
- Redaction. De-identification and redaction requirements are agreed with the company before any work begins.
- Delivery control. Data is delivered only after an executed agreement and the company's authorization.
- Term and end-of-term handling. See what happens to your data when an AI training license ends.
- Record of decisions. Keep the scope decisions on file so the company can show it acted deliberately.
The company keeps ownership; data is licensed, not sold. For how that plays out in drafting, read how to keep ownership of your company data when you license it and how to negotiate an AI data licensing deal.
How do common situations map to what counsel should check?
| Situation | What to check | Typical outcome to confirm |
|---|---|---|
| Proprietary algorithm documentation in the engineering wiki | Whether it is treated as secret internally | Exclude |
| Customer-facing process documents | Whether already shared widely | Often fine to include after review |
| Engineering reviews and incident records | Whether they reveal secret methods | Redact or exclude specific items |
| Slack threads discussing pricing strategy | Sensitivity and third-party content | Exclude or redact |
| Records shared with partners under NDA | Existing confidentiality terms | Check that licensing does not breach them |
| Employee-authored internal guides | Ownership and confidentiality | Usually company property; confirm |
SlackThird-party confidentiality is a separate question; see whether a client NDA stops you from licensing records about them, which covers how a company screens archives for counterparties' confidential information. The company's own published promises matter too: FTC staff said in February 2024 that it may be unfair or deceptive to widen data practices, such as AI training, through a quiet, retroactive change to terms or a privacy policy, so counsel should check what the company has already told customers. That is staff guidance, not a rule. Do not confuse the two: trade secret protection concerns the company's own secrets, and NDAs concern other parties' secrets.
Does a licensed dataset help or hurt reputation and valuation?
It can do neither if scoped carefully. For the owner's concerns beyond legal status, see whether licensing data to AI hurts a company's reputation and whether licensing company data increases business valuation. Compare the routes in data marketplace listing vs managed data licensing, because a public listing makes access control harder to show. The difference between licensed and scraped sources is covered in licensed data vs scraped data: the legal-risk difference.
What should a partner say?
How are partners paid?
Partners earn 25% of the eligible platform fees SourceX actually collects from the referred company's licensing deals, capped at $100,000 cumulative per referred company. Rewards become payable only after the buyer pays and SourceX receives its fee, and no reward is guaranteed. The reward is a share of SourceX's fee and is never deducted from what the company receives. Licensed professionals should check their own rules on referral fees and disclosure.
When should the conversation stop?
Stop if the company's value is concentrated in a few secrets it will not exclude, if it has fewer than 50 full-time employees at peak (contractors excluded), if the owner will not consider an exclusive license, or if nobody can say what is treated as confidential. Partners never export, upload or describe confidential records, and should not ask to see anything to answer this question.
Next step
If a company has deep process records and an owner who wants counsel to set the boundaries, register as a partner and make the introduction. The owner can also start at sourcex.si/apply, and the data inventory builder helps list systems at the metadata level without describing contents.