Where your archive goes, and who can read it.
Handing over a company's archive is a bigger act of trust than any other transaction on this site. This page states what we do with it. If something here is not specific enough to hold us to, tell us and we will make it specific.
Before you send anything
Nothing is read, and no license exists, until an agreement is signed. You can stop at any point before that and we delete whatever we hold. We will sign your NDA rather than ask you to sign ours if that is easier; we have no interest in a negotiation about paperwork before you know whether the archive is worth anything.
Transfer
We provide a private bucket per owner, with credentials that work once and expire. Transfers are encrypted in flight. You can also hand us read-only credentials to your own storage and we will pull from it, which some sellers prefer because it leaves the copy in their control until the inventory is done.
Storage and access
Archives are encrypted at rest and held in a separate store from anything else we run. Access is per-archive and logged: the assigned editor and the engineer running the inventory, nobody else, and access ends when the inventory does. We do not copy archives to laptops, and we do not put them into third-party tools during review.
Personal data comes out first
The inventory scanner runs before any human reads the archive. Customer personal data, credentials and secrets are identified and removed under the corporate standard, and the record of what was removed, and from where, travels with the data. An editor reads only what survives that pass.
If you walk away
If you walk away, or we do, everything we hold is deleted within thirty days and we confirm the deletion in writing. The inventory is yours to keep either way, as a record of what the company actually had.
After a sale
Licensed material is delivered to buyers de-identified, with the provenance record attached. You can withdraw an archive or any part of it on written notice: we mark it withdrawn, stop delivering it, and notify licensees who already received it. Payment already made is not recovered.
Questions sellers ask
If yours is not here, ask it. We would rather answer it before you send us anything.
Can you prove the customer data is gone?
The manifest lists every category of personal data found and removed, with counts and the systems it came from. You get that document before you decide anything, and it is the same document an appraiser or a board would want to see.
What if my old customer contracts restrict this?
That is what the rights review is for. Counsel reads IP assignments, employee agreements and customer contracts for anything that survives the company, and anything encumbered is carved out of the sale rather than quietly included.
Who ends up with it?
AI labs and companies training or evaluating models, under a license that bars them from reselling it or re-deriving a copy. We will tell you the class of buyer before you sign, and name them if the buyer permits it.
Could it be traced back to my company?
Delivered material carries a provenance record that identifies the seller by agreement number, not by name. If you want the company named, some buyers value that provenance; it is your decision and it is written into the agreement either way.
We were acquired, or we are in an insolvency process. Who can sell?
Whoever holds the entity's assets: the acquirer, the administrator, or the directors under a wind-down resolution. We confirm that before we inventory, because an archive we cannot establish ownership of is one we decline.
Security issues
If you find a vulnerability in anything we run, write to us. We will acknowledge within one business day and we will not threaten you for telling us.
Data you think we should not hold
If you believe we hold something we should not, tell us what and why. We will suspend delivery of it while we check.
Contact
Through the closed-company form or the company form, both of which reach a person directly.