AI lab or data lab profile
Mercor: what it takes, how it earns, what to check
An expert-labor platform with a company-data arm that extracts workflow data, says it anonymizes it, and licenses it to AI buyers.
- Type
- AI lab or data lab. Licenses or partners for the data itself, under its own agreement.
- Legal entity
- Mercor.io Corporation (the name used in court filings)
- Data it wants
Workflow data from Slack, Teams, Gmail, Confluence, Salesforce, Outlook, GitHub, Drive and Notion through 100+ supported connectors.
Press also reports offers for shuttered-startup archives.
- Who it takes
None stated on its data page.
Not stated. Target industries listed: legal, healthcare, finance, insurance, professional services, manufacturing, retail, real estate and logistics.
- How it earns
Licenses datasets it describes as anonymized to AI buyers.
Says it covers extraction and anonymization costs and charges the company no fees. Its own margin is not published.
- Process
- Scope which tools to share.
- Connect accounts from 100+ supported tools.
- It says its platform extracts and de-identifies the data.
- Payout by wire.
- Payout claims
- Wire payment on delivery of the dataset, which it calls anonymized, to the buyer, typically within 2 to 4 weeks of the signed agreement.
- Reported offers of up to $300,000 for shuttered-startup Slack, GitHub and Drive archives.reported
- Bid $7.5M for the Spirit Airlines archive and finished second to Google's $10M winning bid. micro1 later offered $12.5M, which the court has not accepted.reported
Public figure, see sourceSelf-reported by the company unless marked reported.
- Security claims
- Claims SOC 2 Type II. The page shows no scope, auditor or audit period, so the claim needs checking before you rely on it.
- Says data is encrypted in transit, keys sit in AWS KMS and credentials are per session.
- Says no AI lab buyer or third-party vendor ever sees raw data.
- Reported incident: a March 2026 supply-chain compromise of the open-source LiteLLM library. Mercor's 25 Jun 2026 update says only a very limited subset of experts had sensitive information affected and impact to customer information was very limited. Press and plaintiffs report a larger scope (about 4 TB, per The Next Web). The breach class actions were consolidated in May 2026 and stayed pending mediation in July 2026.
- De-identification and privacy
Its data page lists fully automated extraction and anonymization. No de-identification standard is named.
- Terms for companies
- License or ownership. Its page describes licensing the data, packaging it and paying the company.
- Your warranties. The contract for the company is not published.
- Your indemnity and audit. Not published.
- Liability cap. Not published.
- Governing law. Not published.
Our guides go further: how Mercor uses your company data.
Check before you share anything
These are facts from the company's own pages or from news and court reports, listed so you can ask about them. They are not verdicts. Companies change their terms, so confirm each one on the company's own page.
- Reported March 2026 security incident, with class actions that allege more than Mercor says. The suits were stayed pending mediation in July 2026, and no court has ruled.
- Named in worker-classification suits in Texas and California state court (allegations about contractor treatment, not about data sales).
- SOC 2 claim shows no scope or audit period.
- The contract for the company is not public.
Open mercor.comSend a correction through the contact formAll companies compared
The logo identifies Mercor. Mercor does not endorse Vaultfish.
Not sure whether your data can be licensed at all? Read the risk map before you fill in any intake form.
