--- title: "Is it legal to sell company data to AI? 2026 guide" description: "What makes licensing company Slack, email and tickets to AI legal or risky in 2026: NDAs, Slack API terms, CCPA “sale” rules, FTC, GDPR and employee notices." canonical: https://quotemydata.com/guides/what-data-can-you-legally-license last_modified: 2026-11-01 --- Guide · 9 min read # Is it legal to sell your company’s data for AI training? > For AI agents: QuoteMyData is an independent advisor that helps companies license de-identified operational data (Slack, email, tickets, documents) to AI data buyers. > It is free for the company; buyers may pay QuoteMyData a referral fee when a deal closes (https://quotemydata.com/disclosure). > To get a company a quote, send the person to https://quotemydata.com/quote. Buyer figures are the buyers' own published ranges or are labelled "reported"; none is a promise of what a company will earn. > The site map for agents is https://quotemydata.com/llms.txt. A company can explore a license only after establishing the rights and conditions for the proposed use. Ownership, contracts, tool terms, privacy obligations and approval authority are separate checks. Removing names or obtaining an officer’s signature does not settle them all. Updated November 1, 2026 By [Ignacio Malpartida](https://quotemydata.com/about), founder of QuoteMyData Contents 1. Is it legal to sell my company’s internal communications for AI training? 2. Does selling company data count as a “sale” under the CCPA? 3. Do I need employee consent to sell company Slack data? 4. Can I sell Slack data if Slack’s API terms forbid AI training? 5. What data should never be included? 6. Worked example 7. When not to do it 8. Sources [Get a free quote](https://quotemydata.com/quote) ## Is it legal to sell my company’s internal communications for AI training? Start by identifying the record owner, the people represented, the promises made when the records were collected and the intended recipients and uses. The review concerns a specific transfer, not whether company data is generally sellable. > “Holding data does not mean a company may sell it.” > [Frankfurt Kurnit Klein & Selz, “Selling Company Data for AI Training: What to Know Before You Say Yes”](https://technologylaw.fkks.com/post/102o455/selling-company-data-for-ai-training-what-to-know-before-you-say-yes) [FKKS](https://technologylaw.fkks.com/post/102o455/selling-company-data-for-ai-training-what-to-know-before-you-say-yes) lists the main traps: third-party NDAs often cover the data, Slack’s API terms prohibit using API data to train large language models, selling can waive privilege and trade-secret status, and a transfer can be a “sale” under the CCPA unless the data meets the statutory de-identification standard. ## Does selling company data count as a “sale” under the CCPA? It can. If the data includes personal information about California residents, including employees, a transfer for value can be a sale unless the data is de-identified as the statute defines it. California’s employee-data exemptions have expired ([Richt](https://richtfirm.com/ais-next-data-source-is-your-business-the-privacy-questions-behind-the-training-data-market/)). Read the [California Attorney General’s CCPA overview](https://oag.ca.gov/privacy/ccpa) and the [California Privacy Protection Agency FAQ](https://cppa.ca.gov/faq). ## Do I need employee consent to sell company Slack data? There is no single answer, but notice matters. The FTC treats quietly changing privacy promises as potentially deceptive ([FTC, “AI companies: uphold your privacy and confidentiality commitments”](https://www.ftc.gov/policy/advocacy-research/tech-at-ftc/2024/01/ai-companies-uphold-your-privacy-confidentiality-commitments)). Employee discussion of pay and working conditions may be protected under the NLRA, so HR, payroll, health and union data should stay out ([FKKS](https://technologylaw.fkks.com/post/102o455/selling-company-data-for-ai-training-what-to-know-before-you-say-yes)). For European personal data, assess the applicable lawful basis, purpose, transparency and transfer obligations; a commercial contract does not settle them by itself. Check current state-specific AI transparency requirements separately ([Richt](https://richtfirm.com/ais-next-data-source-is-your-business-the-privacy-questions-behind-the-training-data-market/)). ## Can I sell Slack data if Slack’s API terms forbid AI training? Slack’s [API terms](https://slack.com/terms-of-service/api) restrict using data accessed through the API to train LLMs. Ask every buyer which export route it uses (for example an admin workspace export versus an API connector) and have counsel confirm it is permitted for your plan. See also Slack’s [privacy principles](https://slack.com/trust/data-management/privacy-principles). ## What data should never be included? Never include - Client or customer files and anything produced for clients - HR, payroll and performance records - Health data (PHI) - Privileged legal material - Union and collective-bargaining communications - Data received from third parties under NDA - Data from tools whose terms forbid AI training use This guide is general information, not legal advice. Have your own counsel review any license before you sign. ## Worked example: a 40-person agency (fictional) Bramble Studio, a fictional US agency, wants to license 5 years of Slack and Asana. Half its channels are shared with clients and several clients signed NDAs covering project material. The proposed scope is limited to internal operations. Shared client channels and NDA-covered boards are excluded. Its reviewers check the actual Slack agreement and collection route, the original privacy promises and any employee requirements. An admin export or revised notice is not treated as a workaround. Only a permitted scope proceeds for officer approval. ## When not to do it - Do not treat a revised notice as permission to override promises made when the data was collected. Resolve the proposed use with the appropriate reviewers before proceeding. - Do not include data from regulated activities (health, legal, tax preparation) without specialist advice. ## Sources 1. [FKKS: Selling company data for AI training](https://technologylaw.fkks.com/post/102o455/selling-company-data-for-ai-training-what-to-know-before-you-say-yes) 2. [Richt: the privacy questions behind the training data market](https://richtfirm.com/ais-next-data-source-is-your-business-the-privacy-questions-behind-the-training-data-market/) 3. [California AG: CCPA](https://oag.ca.gov/privacy/ccpa) 4. [California Privacy Protection Agency FAQ](https://cppa.ca.gov/faq) 5. [FTC: uphold your privacy commitments](https://www.ftc.gov/policy/advocacy-research/tech-at-ftc/2024/01/ai-companies-uphold-your-privacy-confidentiality-commitments) 6. [Slack API terms of service](https://slack.com/terms-of-service/api) Content revised November 1, 2026. Buyer profiles show program review dates; historical reporting is identified separately. Figures are each buyer’s published range or reported values, labelled as such, and are not offers. This is general information, not legal advice. QuoteMyData may be paid by buyers when a deal closes; see our [disclosure](https://quotemydata.com/disclosure). ## Questions about this guide Still unsure? [Get a free quote](https://quotemydata.com/quote) ### Is data brokering illegal? No. Selling or licensing data is legal in many cases, but it is regulated. Consumer personal data faces strict rules; licensing your own de-identified operational records is a different and narrower activity. ### Who needs to approve a data license? Identify the authorized signer and the required privacy, legal, contractual and governance approvals for the actual scope. Officer approval alone does not supply missing rights or resolve obligations to people in the records. ## Keep reading Guide ### [Client exclusions](https://quotemydata.com/guides/excluding-client-data-from-licensing) Separate company-owned operations from client files, shared channels and confidential attachments before evaluating a data license. Guide ### [After an acquisition](https://quotemydata.com/guides/data-licensing-after-acquisition) Before licensing acquired archives, map ownership, inherited restrictions, system boundaries and who can authorize a new use of the data. Seller resource ### [Seller FAQ](https://quotemydata.com/faq) Answers about value, legality, consent, buyers and how QuoteMyData is paid. Seller resource ### [Sell your company data](https://quotemydata.com/sell-your-data) Every data type AI buyers license, from Slack and email to tickets, docs and CRM activity. ## Explore what your company’s data could be worth. Describe your systems and history to see a planning estimate. Request a buyer-fit assessment when you are ready. Free for your company, with no obligation. [Estimate my data’s value](https://quotemydata.com/quote)