How we handle company data

Last updated October 14, 2026

This page explains what happens to a company’s data when it is licensed through Six Eight Labs (“6/8 Labs”): what we access, how it is processed, where it goes and what the agreement protects. Website visitor information is covered by our privacy policy.

1. 01

   What we access

   Only the systems you approve, and only after the agreement is signed. Leave out any system, folder or record type.

2. 02

   Read-only

   We can’t change or delete anything in your systems, and access is revoked when the project ends.

3. 03

   De-identified

   Names, email addresses, phone numbers and customer details are removed before data leaves processing.

4. 04

   Encrypted

   In transit and at rest. Original files are deleted as soon as processing is done.

5. 05

   Who receives it

   AI labs and research teams, to train models. It is never published or sold to your competitors.

6. 06

   In writing first

   Scope, use, retention and payment are set out in an agreement you sign before any access.

• What we access
• How it is processed
• What labs see before a sale
• Who receives it
• Storage, retention and deletion
• What the agreement sets
• What we need from you
• What we never do
• Questions

What we access

Nothing before a signed agreement. The data check asks for counts and descriptions, such as which tools you use, years of history and rough volume, never the records themselves. An administrator can optionally measure Google Workspace or Microsoft 365 read-only: we receive aggregate account, message and storage figures from the admin usage reports, never content, and keep no access afterwards. After an agreement is signed, we access only the systems, date ranges and record types it names. You can leave out any system, folder or record type.

Access is read-only, so we can’t change or delete anything in your systems, and it is revoked when the project ends.

How it is processed

• Identifying details are removed or replaced before any AI lab uses the data. Names, email addresses, phone numbers and other personal fields are covered, and messages and documents are reviewed for sensitive information beyond names.
• De-identification is done by an independent specialist firm, so raw files are not handed to the buying lab.
• We ask for de-identification to be completed within 14 days of extraction, scaled to the size of the data. That window is the riskiest stretch for the company, so the agreement treats it that way.
• Passwords, payment credentials and anything the agreement excludes are left out entirely.

No de-identification method is perfect. If a source holds information you can’t risk sharing in any form, leave it out of scope.

What labs see before a sale

AI labs see redacted previews only. Your data stays in your systems and under your control until a lab licenses it.

Who receives it

Only the AI lab or labs that license the data, under the uses the agreement permits. Data is never published or shared publicly, and it is not sold to your competitors. We push for sub-licensing to be restricted, for example to US-based AI research companies, with penalties attached.

Storage, retention and deletion

Data is encrypted in transit and at rest. Raw files are kept only as long as processing requires, then deleted. We ask the buying lab for a Certificate of Deletion once raw files have been transformed. Retention of the prepared dataset follows the licence term in the agreement.

What the agreement sets

• The exact scope: systems, date ranges and record types included and excluded.
• Permitted uses, exclusivity period, acceptance window and payout timing.
• Sub-licensing restrictions, de-identification deadlines and deletion obligations.
• Liability caps and what they cover.

The company keeps ownership of its underlying data. A licence grants defined uses for an agreed period. It is not equity or debt. See the terms explained for what is market standard.

What we need from you

• Confirmation that you have authority to license the data on the company’s behalf.
• Which systems are yours to license. Client deliverables at agencies and consultancies usually belong to the client.
• Whether the data has been sold or licensed before, and any exclusive licence still active.
• An inventory: each system, the years available for export and the total volume.

Only share data your company has the right to share. Some customer and vendor contracts restrict how data can be used, so check yours, or send them to us and we’ll go through them with you.

What we never do

• Access company systems before an agreement is signed.
• Give an AI lab raw, identified files.
• Publish company data or share it beyond the licence.
• Use licensed data for any purpose the agreement does not permit.
• Sell personal information about anyone.

Questions