Articles / sell business email data

Sell Business Email Data: A Licensing Checklist

Explore how to sell business email data for AI: assess useful threads, document sharing rights, protect sensitive content and review a defined license offer.

Garrow Advisory · Published · Updated

You may be able to sell business email data through a license covering selected company records. Start by checking what the archive documents, which material you can share and what a buyer intends to do with it. A large inbox alone does not establish usefulness, permission or a price.

Describe the archive before discussing a sale

An email license should describe a business record, rather than promise access to everything employees have ever sent. Polyshares publicly includes email among the operational records it licenses. That shows a buyer category exists; it does not mean your mailbox qualifies.

Prepare a description without attaching messages. Name the mailbox types, the period covered, the business functions represented and the person who administers the system. Distinguish shared operational inboxes from individual employee accounts. Explain whether the archive includes replies, attachments and links to records held elsewhere.

Our recommendation is to describe the work the archive can explain. Procurement correspondence, for example, may document how staff interpreted an internal requirement and selected a supplier. That is a hypothetical use case, not a claim that a buyer currently wants your procurement files.

Avoid presenting an address book as an email training dataset. A buyer assessing operational reasoning needs to understand the relationship between messages and work. A directory of contacts has a different purpose and a different rights review.

Make the unit of delivery a coherent conversation

For an internal inventory, consider a conversation bundle with an opaque thread identifier, messages in sequence, sender roles and an outcome reference. Record whether quoted text repeats previous messages. Mark attachment availability separately from attachment permission.

A thread can appear complete while depending on a phone conversation that was never captured. An email saying “agreed” is difficult to interpret without knowing what was agreed. Record these gaps rather than reconstructing missing details from memory.

Use stable replacement identifiers if your approved process preserves relationships across records. A buyer should be able to distinguish a purchasing role from a service role without receiving a real person's identity. Decide which context is necessary for the agreed task and which detail merely creates exposure.

Our operational workflow guide explains how to describe those relationships. If the commercial history lives in another system, use the sales records checklist to identify what an email export would otherwise leave unexplained.

Review the rights in each category

Treat mailbox administration and licensing authority as separate questions. An employee's access to a thread is evidence of access, not a legal opinion about selling it. Ask counsel to review employment arrangements, customer terms, supplier confidentiality agreements and any restrictions inherited through acquisitions.

Record unresolved rights by category

Create a rights register by category. Useful entries include internal routine correspondence, customer correspondence, supplier negotiations, employee matters, legal advice and attachments supplied by outsiders. Record an owner for unresolved questions. Keep restricted categories outside the proposed package until they are cleared.

Qualify the company’s own operating history before discussing an introduction. Identify client-supplied material separately and ask the responsible reviewer to check its restrictions. Do not include a client's files simply because they are accessible in the same mailbox.

Do not promise that a license covers both participants' contributions merely because your company retained the conversation. Ask counsel what permissions the proposed use requires. If the answer is uncertain, narrow the scope instead of describing uncertainty as approval.

Specify privacy work before creating an export

Address removal is only an initial operation. Signatures, delivery instructions, embedded screenshots and unusual events may reveal identities. Decide who reviews free text, who handles attachments and who verifies that replacements preserve the business meaning.

The ICO's pseudonymisation guidance explains that pseudonymising personal data does not automatically take your processing outside data protection law. Do not label an address-stripped archive anonymous without an appropriate assessment.

For Canadian organizations, the privacy regulators' consent guidance emphasizes explaining purposes and disclosures. Have counsel examine whether a proposed AI license fits the applicable permissions. For US and UK operations, ask for jurisdiction-specific advice rather than importing a Canadian consent answer.

The preparation plan should also cover secrets and business confidentiality. Password reset links, access tokens and commercial strategy need separate handling even when personal names are absent. Keep legal correspondence and employee matters out of a routine pilot scope unless specifically approved.

Ask the buyer for an email-specific proposal

Before granting sample access, request a written explanation of the intended task. Ask whether the buyer needs text only, attachments, related records or continuing updates. An archive license and a live mailbox connection are materially different proposals.

Agree how sampling works, which environment holds a sample and what happens if either party stops. Identify the recipient and any permitted onward recipients. Define allowed model training, evaluation or other uses explicitly rather than relying on a broad phrase such as research.

Ask who pays for selection, redaction and export work. Write acceptance criteria around the approved package. If payment depends on approval, ask what can cause rejection and who decides. Specify how disputed exclusions and incomplete threads affect payment.

There is no email payout formula in Garrow's process. Ask the buyer to assess a defined package and explain the proposed payment conditions. Keep a discussion, an offer and a signed agreement distinct when reviewing your options.

Keep the initial conversation at the description level

Garrow does not receive inbox access, samples, exports or screenshots. We use your answers to assess a possible introduction, name the buyer and explain the reason. You decide whether to proceed; any data review happens directly with that buyer under agreed terms.

Your next useful artifact is a plain description of the archive plus a list of rights questions. For a broader inventory, read which business records you can license. Before treating any advertised payout as relevant, read how to assess company data value.

Describe your company and records through Garrow's intake.

Frequently asked questions

Can a company sell its business email archive?

Potentially, through a defined license. Possessing a mailbox does not settle rights in every message, attachment or conversation.

Does Garrow need access to our inbox?

No. Garrow asks about your company and systems, introduces a buyer with your agreement, and does not receive your records.

Is removing email addresses enough?

No. Message content and attachments can identify people or reveal confidential information. Agree a review and redaction process before delivery.

Sources