How AI labs use company data

Real work becomes the test an AI agent is scored on.

AI labs use company data to train and test software agents. Your Slack threads, email chains, tickets and documents show how a real task moved from request to finished deliverable. Public text can't show a lab that path.

The data usually arrives as an export or a connected account. A buyer swaps the names. A lab then builds practice tasks and scoring tests from it.

In plain words

Data licensing means a lab gets to use your records for a while, under rules.

Think of it like this

Think of a library. The lab borrows real work to learn how work gets done. You keep the originals.

You can't get a trained model back out of a lab. Most questions below trace to that.

The public record on what happens inside a lab is thin. Buyers describe their own pipelines on their own pages, so those claims are self-reported. Where a buyer says nothing, we say so.

What data actually arrives?

Three collection methods show up across the buyers we read.

Mercor connects to your accounts. Its page lists 100+ supported tools and says no data leaves your systems until you approve it.

Troveo asks for an export and says it needs no OAuth (a login link) into your systems. micro1 starts with a form that lists your tools and rough sizes. Its engineers then help your IT people with the transfer.

The content is workplace records. micro1 lists SOPs, knowledge bases, CRM data, project histories and QA processes. Troveo lists chat, email, documents, work tools, CRM and support, finance, and code on its business data page.

micro1's CFO says labs want the chain: a request in chat, the spreadsheet that answered it, and the approval that followed. The CFO used a marketing budget request as the example in an undated recorded forum talk.

Each buyer has its own guide, linked at the bottom. Start with how micro1 handles it or how Mercor handles it.

How do the companies change the data before a lab sees it?

Every buyer says it removes or swaps personal details. The methods differ, and so does what is left behind.

Troveo shows the cleanest example on its business data page. A sentence naming a customer and an email address becomes a sentence with PERSON-014 and EMAIL-019 in their place.

micro1's David Revland, who works on human data, describes a similar swap in an undated recorded forum talk. A name becomes the same stand-in on every platform, so the role and the cross-tool trail survive.

micro1's page says some datasets get synthetic rewrites. micro1 staff said in the same talk that companies can't clean the data first, because blanking names destroys the trail it needs.

Mercor says its extraction and anonymization is automated. Handshake AI says it applies a structured process to remove direct and indirect identifiers.

A swapped name can still point to a person. The UK Information Commissioner's Office says pseudonymised data is personal data in the hands of anyone who holds the extra information. Handshake AI says on its own page that no process of removing names eliminates re-identification risk entirely. The detail is in micro1's name transformation and pseudonymization versus anonymization.

What do labs build with it?

Public reporting names three uses: reinforcement learning environments, agent training and evaluations.

An RL environment is a practice space. A model attempts a task and an automated grader scores it. Time tied Google's Spirit Airlines bid to environments like that. Google told Time only that the data "can be helpful in improving our products and AI models."

Fortune, reporting on micro1's offer for Spirit's records, wrote that an agent needs to learn how to choose actions, use tools and recover from mistakes. The record of those steps is a trajectory.

The third use is evaluation. micro1's workflows track has employees grade a general-purpose agent on their real daily work. micro1 receives the grade plus the agent's trajectory.

The gap: no lab has published how it used a specific purchase. We have buyers describing plans. The longer read is what AI labs do with company data.

What do you keep?

The companies split on this in their own words.

micro1's page says companies retain ownership of their underlying data. Troveo's licensing guide says a license is permission and you keep ownership. SimpleClosure's terms take a non-exclusive, transferable, sub-licensable, perpetual and irrevocable license to the assets you submit.

Owning your files and the rights a buyer holds over its copy are separate questions. Read the contract for the second one. Our page on what reps and warranties a buyer asks for shows what you will be asked to promise.

What can't you take back?

Deleted files don't un-train a model. Troveo's guide to licensing deals says models already trained survive the license ending. A law firm checklist from Frankfurt Kurnit Klein and Selz says data that has trained a model cannot practically be pulled back out.

A regulator can reach further than a contract can. In February 2024 the FTC's order against Avast required deletion of the browsing data sent to Jumpshot and of the algorithms derived from it. That was a consumer privacy case and not a company-archive deal. It still shows that a model is not always safe from an order.

What a buyer will delete is a contract term. micro1 says data is retained only for a limited period under agreed retention policies, with deletion on request. Mercor's page says nothing on retention or deletion. Deleting after training covers the three separate questions inside this one.

Where can it leak?

Four places, in the order we would worry about them.

The buyer's own security. Mercor said a malicious release of the open-source LiteLLM library in March affected it, and that the impact on customer information was very limited. The Next Web reported about 4 TB exposed, including source code, a user database and interview recordings. I found no report of company-archive data exposed. The facts are on the Mercor data breach page.
Re-identification. Swapped names plus context can point back to a person.
Rights you did not hold. Your customers' and employees' messages are inside the archive. You promise the buyer you had the right to share them.
The people who can see files before the swap. Ask who that is, in writing.

Who pays if a buyer is hacked is usually a contract term. See who is liable if the data buyer is hacked.

Which companies explain their handling?

Six publish enough to read. Each guide covers what the company asks for, how it collects, what it says it does to the data and who gets it. It also covers ownership, retention, security, how it pays and what to ask.

The buyers directory lines them up side by side. Before any call, run the rights check and read the risk map.

Talk to a privacy or commercial lawyer in your state before you sign.

micro1 may pay us a referral fee if a company we introduce goes ahead with it. How we are paid

Apply to micro1's data partnership (paid link)micro1's own data-partnerships pagePaid link. How we are paid

Vaultfish helps you run the process. We are not lawyers and this is not legal advice. If you need counsel who knows this area, we can point you to one. Ask for a referral