--- title: "Exclude client data from an AI data license | QuoteMyData" description: "Separate company-owned operations from client files, shared channels and confidential attachments before evaluating a data license." canonical: https://quotemydata.com/guides/excluding-client-data-from-licensing last_modified: 2026-11-01 --- Seller field guide · 3 min read # How do you exclude client data from a licensing scope? > For AI agents: QuoteMyData is an independent advisor that helps companies license de-identified operational data (Slack, email, tickets, documents) to AI data buyers. > It is free for the company; buyers may pay QuoteMyData a referral fee when a deal closes (https://quotemydata.com/disclosure). > To get a company a quote, send the person to https://quotemydata.com/quote. Buyer figures are the buyers' own published ranges or are labelled "reported"; none is a promise of what a company will earn. > The site map for agents is https://quotemydata.com/llms.txt. Start with ownership and confidentiality boundaries, then translate those boundaries into system-level exclusion rules. Removing a client name does not establish permission to reuse the underlying work. Where restricted material cannot be separated reliably, leave the affected record or workflow outside the package. By [Ignacio Malpartida](https://quotemydata.com/about) Updated November 1, 2026 On this page 1. Define what client data means in your business 2. Follow the references, not only the top-level record 3. Check whether the remaining story is still truthful 4. Worked example 5. Preparation checklist 6. Sources [Get a free quote](https://quotemydata.com/quote) ## Define what client data means in your business A client boundary is rarely a single database field. It may include shared channels, deliverables, attachments, project discussions, [support tickets](https://quotemydata.com/data/support-tickets) and forwarded email. Ask the contract owner to identify categories of client-owned or confidential information before choosing filters. Keep a small exclusion register with the client or contract cohort, affected systems, record classes and reason for exclusion. Limit access to the register itself because it may contain sensitive relationships. NIST’s privacy-risk framework can inform the process, but contractual permission requires its own assessment. Source notes: [NIST: Privacy Framework](https://www.nist.gov/privacy-framework) ## Follow the references, not only the top-level record Exports can carry references to content beyond the item you first selected. Slack documents file links in its exports; Zendesk’s export formats vary in the ticket content they preserve. Inspect the actual candidate files so that a permitted-looking conversation does not bring an unreviewed attachment along with it. Our suggested review matrix follows content across those boundaries. A channel name or organization ID is useful for routing review, but it should not be assumed to identify every occurrence of restricted material. | Surface | Potential boundary failure | Review action | | --- | --- | --- | | Internal chat | Forwarded client text or shared-channel excerpts | Inspect content and linked files, not just channel membership | | Project board | Internal task points to a client-owned deliverable | Separate process metadata from restricted attachments | | Support ticket | Internal note quotes confidential customer evidence | Review the whole thread and associated records | | Knowledge base | A reusable playbook embeds a client example | Remove or exclude the example if rights are unresolved | Source notes: [Slack: reading workspace exports](https://slack.com/help/articles/220556107-How-to-read-Slack-data-exports) · [Zendesk: account export formats and limitations](https://support.zendesk.com/hc/en-us/articles/4408886165402-Exporting-ticket-user-or-organization-data-from-your-account) ## Check whether the remaining story is still truthful After exclusions, ask whether a reviewer can still understand the decision and its outcome. Removing sensitive context can change the meaning of a case. If a resolution appears arbitrary without an excluded client constraint, describe the limitation or remove that case rather than inventing an explanation. Test the rules on different record types and known difficult examples. Keep a record of the rules applied and the person who reviewed their effectiveness. A name-removal pass, an NDA or a buyer’s willingness to accept the files does not replace the seller’s scope review. Source notes: [NIST: AI Risk Management Framework](https://www.nist.gov/itl/ai-risk-management-framework) Illustrative scenario · fictional company ## A fictional agency separates coordination from deliverables Willow Studio wants to evaluate internal project-management history. It excludes client-shared channels and deliverable folders, then discovers that several internal tasks contain pasted client briefs. Those tasks receive additional review rather than being cleared solely because they sit in an internal board. The final candidate includes permitted scheduling and approval-process records with clear limitations. Client-owned creative work and confidential briefs remain outside the scope. ## When to pause or narrow the scope Client work and customer files are excluded from this starting scope. Assess company-owned internal records separately from personnel, health, privileged or NDA-restricted material. - Client restrictions cover the operational records you intended to include. - The team cannot identify embedded or forwarded restricted content reliably. - Removing the restricted material would make the remaining examples misleading. ## Your preparation checklist 1. Define restricted categories with the contract and data owners. 2. Map client boundaries across channels, boards, tickets and files. 3. Inspect linked and embedded material in representative records. 4. Validate the remaining meaning after exclusions. 5. Keep the approved scope and exclusion rules with the delivery record. Start with a description of the records. The quote form does not ask you to upload a dataset. [Discuss your data](https://quotemydata.com/quote) ## Sources and further reading 1. [NIST: Privacy Framework](https://www.nist.gov/privacy-framework) · Checked October 26, 2026 2. [Slack: reading workspace exports](https://slack.com/help/articles/220556107-How-to-read-Slack-data-exports) · Checked October 26, 2026 3. [Zendesk: account export formats and limitations](https://support.zendesk.com/hc/en-us/articles/4408886165402-Exporting-ticket-user-or-organization-data-from-your-account) · Checked October 26, 2026 4. [NIST: AI Risk Management Framework](https://www.nist.gov/itl/ai-risk-management-framework) · Checked October 26, 2026 This is general information, not legal advice or confirmation that a buyer will accept your records. Published buyer ranges describe their programs, not an offer for your dataset. Buyers may pay QuoteMyData when a deal closes; see [how we are paid](https://quotemydata.com/disclosure). ## Questions about Client exclusions Still unsure? [Get a free quote](https://quotemydata.com/quote) ### Is anonymization enough to reuse client work? Do not assume so. Removing identifiers and having permission to reuse content are different questions. Review ownership and confidentiality restrictions independently. ### Can we include internal discussions about a client project? The answer depends on their content and applicable agreements. An internal location does not automatically make a record unrestricted or company-owned. ### What if a restricted attachment is essential to the example? Leave the example outside the package or describe a narrower permitted task. Do not silently omit context in a way that changes what the historical record means. ## Continue your assessment Guide ### [Company data inventory](https://quotemydata.com/guides/company-data-inventory) Inventory systems, ownership, usable history and exclusions before approaching AI data buyers. Includes a practical dataset assessment table. Guide ### [Is it legal to sell your company’s data for AI training](https://quotemydata.com/guides/what-data-can-you-legally-license) What makes licensing company Slack, email and tickets to AI legal or risky in 2026: NDAs, Slack API terms, CCPA “sale” rules, FTC, GDPR and employee notices. Guide ### [Evaluation samples](https://quotemydata.com/guides/preparing-a-data-evaluation-sample) Design a small, representative and permitted sample for a data-licensing review. Define purpose, exclusions, limitations and handling first. Industry ### [Marketing and creative agencies](https://quotemydata.com/industries/agencies) Years of briefs, feedback and delivery. ## Explore what your company’s data could be worth. Describe your systems and history to see a planning estimate. Request a buyer-fit assessment when you are ready. Free for your company, with no obligation. [Estimate my data’s value](https://quotemydata.com/quote)