Can a private equity firm license data from its portfolio companies?
A sponsor can help portfolio companies license their records, but each portfolio company generally owns its own data and must hold the rights to license it. That means one review per company, covering customer contracts, employee privacy and any lender or exit plans, with each company's own counsel.
Who decides: the fund or the portfolio company?
Business records usually belong to the operating company that created them, not to the fund that owns its shares. The sponsor can encourage a program across the portfolio, but the license is normally signed by each company, approved under its own governance, with proceeds going to that company.
This matters for minority shareholders, co-investors and lenders. Ask counsel whether loan agreements or shareholder agreements require consent for a sale or license of assets.
- CheckAre these records your company's own?
Records you create running your business usually are. Data you hold for customers, under their contracts, often is not.
- CheckDo contracts or NDAs restrict use?
Customer, supplier and partner agreements can bar sharing even de-identified material. Read them, or have counsel read them.
- CheckDo they contain personal data?
Employee and customer details must be removed, and some laws (for example California's) give people rights over their data.
- CheckIs any of it regulated?
Health records, financial-account data and professional client files carry their own rules. Exclude them unless counsel says otherwise.
Why do portfolio companies need separate reviews?
Each company has its own customer contracts, NDAs, vendor terms and privacy notices. A 2026 law-firm overview lists third-party NDAs, commercial agreements and platform terms as common limits on selling data, alongside privacy laws and employee protections. One company may be free to license its support tickets; another may be barred by a customer contract.
Employee data is a recurring issue. Since January 1, 2023, California's CCPA has covered employee personal information for businesses that meet its thresholds, one of which is a revenue test (see How do employee and customer privacy rules affect licensing company data?). Many portfolio companies may meet it. Unionized workforces may raise further questions.
How does licensing interact with an exit?
A buyer of a portfolio company will likely ask about any past data sale during due diligence, according to the same 2026 overview, which recommends keeping a record of what was reviewed, what was excluded and why. Gaps in data rights can surface in diligence and affect valuation.
Exclusivity is the other point to watch. An exclusive license can limit what a future owner can do with the same records. A non-exclusive license usually leaves more room.
What does a sensible portfolio approach look like?
Companies of 250 or more employees can request a call with us to talk through which buyer programs may fit. We are a disclosed matching service and may receive a referral fee from a buyer if a company we sent signs. We never see or hold your records, and we do not act as the portfolio's legal or financial adviser.
- Start with one or two companies that have clean rights and large, well-kept archives.
- Build a short checklist covering contracts, privacy notices, employee data and exclusions.
- Have each company's counsel sign off before samples are shared.
- Compare more than one offer per company.
- Record decisions so they can be shown in a later sale process.
What records do buyers usually look at?
Reporting in 2026 describes buyers seeking everyday workplace records: email, chat, calendars, documents, support tickets, CRM history and code. These show how real teams work, which is what many AI developers want for training. Portfolio companies with long, complete archives across several systems tend to be the most relevant.
Records that are usually left out, or need special care, include HR and disciplinary files, legal advice covered by privilege, and regulated health or financial data. Deciding exclusions early makes reviews faster across the portfolio. Each company's counsel should agree the list, because what counts as sensitive differs by business and by state.
What about companies that are winding down?
Portfolio companies that are closing face a different timeline, because cloud providers may delete data after accounts are cancelled. See the guidance on closing a company and, if a court case is involved, on bankruptcy estates.
Common questions
Can the fund sign one license for the whole portfolio?
Usually the rights sit with each operating company, so each would need to sign or authorize. Ask counsel about your structure.
Will a data license hurt an exit?
It can raise diligence questions. Keeping a clear record of the review, and choosing non-exclusive terms where possible, may reduce questions. Ask counsel.
Do lenders need to consent?
Sometimes. Credit agreements can restrict asset sales or licenses. Check with counsel.
Is employee data covered by privacy law?
Often. For covered California businesses, the CCPA has applied to employee data since 2023. Other laws may apply too.
Which systems matter most?
Buyers typically ask about email, chat, documents, tickets, CRM and code. Long, complete archives are generally more useful than short ones.
Sources
- Selling Company Data for AI Training: What to Know Before You Say Yes (Frankfurt Kurnit Klein & Selz, Oct 1, 2026), accessed 2026-10-15
- California Consumer Privacy Act (CCPA) - California Attorney General, accessed 2026-10-15
- AI labs are buying data from dead startups to train their models (MIT Technology Review, Oct 13, 2026), accessed 2026-10-15
- Frequently Asked Questions - California Privacy Protection Agency, accessed 2026-10-15
General information, not legal, tax or financial advice.