Records disposal checklist: what to review before deleting old company records
Before deleting old records, review four gates: legal retention, open holds, contract duties and licensing value. Document each answer, archive read-only when unsure, and bring in counsel for holds. This checklist helps CFOs and IT providers run that review and keep a licensing option open through SourceX.
What should you review before deleting old company records?
Review four things before anything is destroyed: the legal minimum retention period, any open hold or dispute, obligations written into customer and vendor contracts, and whether the records have value that a deletion would remove for good. Most cleanups only check the first. This is general information, not legal, tax or financial advice. Confirm with your own counsel, tax adviser or professional body before acting.
For a fractional CFO or an outsourced IT provider, the cleanup request usually arrives as a cost line: storage, backup tapes, a legacy ERP license that renews next quarter. The review below turns that request into a short, documented decision. It also leaves a licensing option open, because a destroyed archive cannot be introduced to anyone.
The pre-disposal review: four gates
Call it the 4-gate review. A record set clears disposal only when every gate is green, and the result is written down.
| Gate | Question | Typical owner |
|---|---|---|
| 1. Retention | Has the minimum period set by law, regulation and the company's own schedule expired? | Controller, with counsel |
| 2. Hold | Is any dispute, audit, investigation or subpoena open that touches these records? | General counsel or outside counsel |
| 3. Contract | Does a customer, lender, insurer or vendor agreement require the company to keep, return or destroy the records? | Contracts owner |
| 4. Value | Do the records document years of real workflows, decisions and outcomes that could be licensed? | CFO and the business sponsor |
Retention periods differ by record type, industry and state, so this page gives no numbers. Ask counsel for the schedule that applies to your client. If a hold exists, the litigation hold explainer covers why held material stays out of any licensing scope.
Checklist: before you approve a disposal request
Scope the request
- List the systems, folders, mailboxes or archives in the request, with date ranges
- Name the person who asked and the business reason (cost, risk, migration, retirement)
- Record who in the company has authority to approve destruction
- Confirm whether the request is routine under the schedule or a one-off cleanup
Retention and hold
- Match each record category to the written retention schedule
- Ask counsel in writing whether any hold, audit or investigation applies
- Check that auto-delete rules in email, chat and ticketing are paused for held custodians
- Note tax, payroll and financial-statement records that must outlast the request
Contracts and third-party data
- Search customer agreements for return, destruction and retention clauses
- Separate records that belong to customers, an outsourcer's clients or a former parent
- Check lender, insurer and audit-firm requests for retained documents
- Flag regulated content (health, consumer financial, children's data) for a specialist
Value and alternatives
- Identify systems with five or more years of history that exist nowhere else
- Ask whether the system is being retired, which is the moment export options narrow
- Consider archiving read-only instead of deleting
- Decide whether the company wants a licensing conversation before the decision is final
How to use the results
| Result | What it means | Next action |
|---|---|---|
| All four gates green | Disposal is defensible and documented | Approve, log the decision, retain the log |
| Gate 1 or 2 red | The law or a dispute says keep | Do not delete; calendar a re-review |
| Gate 3 red | A contract obliges retention or return | Follow the contract; involve its owner |
| Gate 4 amber | Records may have licensing value | Pause, archive read-only, run the company fit checker |
| Records not the company's | Rights sit elsewhere | Exclude from any inventory and from the cleanup |
What a pause looks like in practice
Pausing is not a refusal. It is a dated note: "Disposal of the 2016-2021 project archive deferred 60 days pending hold confirmation and a records-value review."
The same discipline helps a first audit. The first-year audit readiness checklist asks for a clear map of systems and owners, and a disposal log is part of that map. For companies running a legacy ERP, the Acumatica records page shows what a long transaction history can look like, and the wholesale distribution page shows the kind of operating archive that often sits in a cleanup request.
Red flags that stop the cleanup
- Nobody can say who approved the last disposal
- Backup or archive tapes are being wiped to save a renewal fee
- A system is being decommissioned this quarter with no export plan
- The records contain another company's data and no consent exists
- A court, trustee or assignee now controls the company's assets and has not been told
What a partner does and does not do
A partner never opens, exports or describes the records. You raise one question with the sponsor: "Before this archive is deleted, would you want it assessed for licensing?" If yes, the company completes its own data inventory and SourceX handles qualification, rights review, buyer review and delivery.
Partners earn 25% of the eligible platform fees SourceX actually collects from the referred company's licensing deals, capped at $100,000 per referred company. The reward is paid only after the buyer pays and SourceX receives its fee, and no reward is guaranteed.
Next step
If a client has a large, old archive and a deletion date, check it against who qualifies, then register as a partner and make the introduction. Check the fractional CFO referral page for how these conversations usually start, and keep the review log in the client file.
- Step 1Share your linkSend your personal link to a company you know.
- Step 2Company appliesThe company applies itself at /apply.
- Step 3Buyer selects and paysThe buyer selects and pays for the data and SourceX receives its fee.
- Step 4You get your rewardYour share of SourceX fees becomes payable.
Common questions
Who should approve the destruction of old business records?
Approval belongs to someone with authority over records, normally an officer or the owner, advised by counsel. A CFO or IT provider can recommend and execute, but the decision should be documented with the date, the scope and the retention basis. Informal approvals by email chain are the most common gap found when a dispute or audit later asks what happened.
Is it safe to delete records just because the retention period has ended?
Not automatically. A retention period ending removes one reason to keep records, but a hold, a pending audit, a customer contract or an insurer requirement can still apply. Check all four gates and record the result. If any gate is unclear, archive read-only until counsel confirms the position in writing.
Does a disposal review cost the company much time?
For a defined set of systems the review can be short, because many answers come from documents the company already has: the retention schedule, the list of open matters and the contract register. The cost is higher when nobody owns those documents, which is itself a finding worth fixing.
Can old records really have value to AI data buyers?
They can when they document real work over several years: tickets, emails, project files, decisions and outcomes across connected systems. Value depends on rights, structure and breadth, and nothing is binding until the company agrees price and terms and signs. Only an inventory and buyer review can say whether a given archive qualifies.
What if a system is being retired next month?
Raise it now. Retirement is the point when export options are cheapest to keep and hardest to recover. Ask the company to preserve a read-only archive while it decides, and suggest it speak to SourceX before the shutdown date. Records already deleted cannot be assessed, so a short delay costs little compared with losing them.
Related pages
- Can records under a litigation hold be licensed or shared?
- Check Company Fit for Data Licensing
- First-year audit readiness checklist for growing companies
- Acumatica data export: what records show how work was done?
- Wholesale distribution companies: which operating records can be licensed
- Which US businesses are a fit for a SourceX data licensing introduction
Free resources
- MOIC calculator — Multiple on invested capital from realized and unrealized value.
- PDF bank statement to CSV converter — Turn Chase, Bank of America or Wells Fargo PDF statements into CSV, privately in your browser.
- Client data licensing eligibility checker — A transparent preliminary screen for one company.
- All free tools · MCP resource center
By SourceX Partnerships Team · Published 2026-10-09 · Updated 2026-10-09
Know a US company with valuable proprietary data?
Become a referral partner from anywhere we support, get your link and introduce an owner or authorized decision-maker.
Refer a company →I own a business
Explore licensing your company's data to AI developers worldwide. Start a short assessment; no uploads needed.
Start an assessment