Guide · 9 min read
Is it legal to sell your company’s data for AI training?
A company can explore a license only after establishing the rights and conditions for the proposed use. Ownership, contracts, tool terms, privacy obligations and approval authority are separate checks. Removing names or obtaining an officer’s signature does not settle them all.
Is it legal to sell my company’s internal communications for AI training?
Start by identifying the record owner, the people represented, the promises made when the records were collected and the intended recipients and uses. The review concerns a specific transfer, not whether company data is generally sellable.
“Holding data does not mean a company may sell it.”
Frankfurt Kurnit Klein & Selz, “Selling Company Data for AI Training: What to Know Before You Say Yes”
FKKS lists the main traps: third-party NDAs often cover the data, Slack’s API terms prohibit using API data to train large language models, selling can waive privilege and trade-secret status, and a transfer can be a “sale” under the CCPA unless the data meets the statutory de-identification standard.
Does selling company data count as a “sale” under the CCPA?
It can. If the data includes personal information about California residents, including employees, a transfer for value can be a sale unless the data is de-identified as the statute defines it. California’s employee-data exemptions have expired (Richt). Read the California Attorney General’s CCPA overview and the California Privacy Protection Agency FAQ.
Do I need employee consent to sell company Slack data?
There is no single answer, but notice matters. The FTC treats quietly changing privacy promises as potentially deceptive (FTC, “AI companies: uphold your privacy and confidentiality commitments”). Employee discussion of pay and working conditions may be protected under the NLRA, so HR, payroll, health and union data should stay out (FKKS).
For European personal data, assess the applicable lawful basis, purpose, transparency and transfer obligations; a commercial contract does not settle them by itself. Check current state-specific AI transparency requirements separately (Richt).
Can I sell Slack data if Slack’s API terms forbid AI training?
Slack’s API terms restrict using data accessed through the API to train LLMs. Ask every buyer which export route it uses (for example an admin workspace export versus an API connector) and have counsel confirm it is permitted for your plan. See also Slack’s privacy principles.
What data should never be included?
Never include
- Client or customer files and anything produced for clients
- HR, payroll and performance records
- Health data (PHI)
- Privileged legal material
- Union and collective-bargaining communications
- Data received from third parties under NDA
- Data from tools whose terms forbid AI training use
This guide is general information, not legal advice. Have your own counsel review any license before you sign.
Worked example: a 40-person agency (fictional)
Bramble Studio, a fictional US agency, wants to license 5 years of Slack and Asana. Half its channels are shared with clients and several clients signed NDAs covering project material.
The proposed scope is limited to internal operations. Shared client channels and NDA-covered boards are excluded. Its reviewers check the actual Slack agreement and collection route, the original privacy promises and any employee requirements. An admin export or revised notice is not treated as a workaround. Only a permitted scope proceeds for officer approval.
When not to do it
- Do not treat a revised notice as permission to override promises made when the data was collected. Resolve the proposed use with the appropriate reviewers before proceeding.
- Do not include data from regulated activities (health, legal, tax preparation) without specialist advice.
Sources
- FKKS: Selling company data for AI training
- Richt: the privacy questions behind the training data market
- California AG: CCPA
- California Privacy Protection Agency FAQ
- FTC: uphold your privacy commitments
- Slack API terms of service
Content revised November 1, 2026. Buyer profiles show program review dates; historical reporting is identified separately.
Figures are each buyer’s published range or reported values, labelled as such, and are not offers. This is general information, not legal advice. QuoteMyData may be paid by buyers when a deal closes; see our disclosure.
