step 1 scope what data, which records, how much history step 2 rights who owns it, what consent exists, what's restricted step 3 prep remove or protect personal and sensitive fields step 4 contract permitted uses, term, delivery, payment step 5 deliver only the approved dataset, only the agreed scope step 6 payout track it, pay out, repeat with the same buyer if it works
common mistakes
- starting with the buyer before knowing what you actually own
- skipping the privacy review because "it's internal data"
- signing permitted-use terms you can't enforce
the first question
if you run a business with real operational records, start here: what do we own, and what are we allowed to share?
sourcex runs this process for suppliers, from origination to payout.
check your data's fit on sourcex.si