What we can see during scoping
Scoping uses read-only, scoped access to the systems you name. We record which systems you run, the date ranges they cover and rough volumes (messages, tickets, records, lines of code). Nothing is copied out of your systems at this stage. The estimated range we send back is built from that metadata, not from the content of the record.
What happens before anything moves
We check employee notices and handbooks, customer and vendor contracts, NDAs, union agreements and the terms of the software the data came from. Your counsel signs off before any buyer sees a sample. If a category of data cannot be licensed cleanly, it is excluded, not negotiated around.
De-identification
An independent de-identification partner you approve strips names, customers, accounts and other identifying fields before any buyer sees the record. The following stay out by default, whatever a buyer asks for:
- HR files, performance reviews and compensation records
- Health and medical information
- Data you hold on behalf of clients or under a confidentiality obligation
- Payment card data, bank details, credentials and secrets
What buyers see before they bid
A data sheet (systems, date ranges, volumes, de-identification method) and a de-identified sample. Buyers bid in sealed rounds on that material. They do not receive the record to evaluate it.
What happens after you sign
The full de-identified record is delivered once, to the one buyer you chose. Every license we draft carries these terms:
- No re-identification. The buyer commits not to re-link data to people, intentionally or by negligence.
- Bounded term and field of use. A set number of years, for AI training only, so you can license again.
- Limits on onward transfer. Resale only to approved categories of buyer, disclosed to you.
- Raw copies deleted. Unprocessed data destroyed within 30 days of delivery.
What Bright Info keeps
We do not retain a copy of your record after delivery. We keep the data sheet, the bid record and the signed license for the life of the agreement.
Reporting a concern
Write to hello@brightinfo.com. Security reports are read by the founder and acknowledged within two business days.