Valuesurvivessubtraction.

We take the rights to how real companies run, remove what must never leave, and license the rest.

Cover sheetIllustrative

This licence is granted by

the operating company that made the recordsGrantor

held and de-identified under licence by

Frontier Data SupplyCustodian

to

the labLicensee

under the De-identification Standard, version 1.0.

Licensor of record

The deed press

What a record looks like on the way through.

One record, three columns, nothing hidden. Switch the source to see your own domain.

Instrument of grantFDS-2026-0121
1. Source field
2. Technique applied
3. As licensed
staff_name
Replaced with a salted non-reversible token
staff_5a0c9e44
employee_id
Suppressed
removed
site
None required
Downtown
phone
Suppressed
removed
shift_date
None required
2025-03-04
date_of_birth
Generalised
1981
personal_email
Suppressed
removed
shift_note
Scanned for direct identifiers
retained
Awaiting execution.Executed. Raw copy destroyed on schedule.

Source field

The field as the source system names it.

Technique applied

The treatment the standard sets for that class: suppressed, replaced with a token, generalised, scanned, or none required.

As licensed

What a lab receives: a bar where the value was removed, or the token, the generalised value or the kept value.

The technique column is drawn verbatim from the published standard, and no technique shown here can be reversed.

What a lab is actually buying.

What we supply

Provenance on every file

Each document carries its source system, export, acquisition date and the agreement it came under.

Source · export · date · agreement

Coherence across systems

The same company and the same period, across mail, chat, database and accounting.

One company, one period

Exact sizing

Volumes are counted from the source system at export.

Counted at export

Native format kept

Spreadsheet formulas and internal references survive. A workbook arrives as a workbook.

Formulas intact

Deduplicated

One form repeated ten thousand times is not a corpus. We screen before delivery.

Screened before delivery

Segmented by industry

Delivered in labelled tranches so you can weight, hold out or reject by segment.

Labelled tranches

Every corpus is described before it is sold.

A manifest is the document a licence is negotiated against. Below is a redacted sample from an anonymised supplier, with each column keyed to a note beneath it.

Sample manifest, redacted. One anonymised supplier.FDS-2026-0121
Sample manifest, redacted. One anonymised supplier.
Source systemVolumeYearsContributorsDe-identification
Mail, tenant wide30 mailboxes2022 to 202627Addresses tokenised, bodies scanned
Chat, 46 channels7,900 messages2022 to 202627Handles tokenised, DMs excluded
Application database140 tables2021 to 202670Identifier columns suppressed at source
CRM5,539 accounts2022 to 202612Buyer identity dropped
Accounting5 fiscal years2021 to 20264Bank and routing fields suppressed
Document store3,769 native files2021 to 202670Scanned pages redacted by pixel destruction
Source system

The system of record it was exported from, named specifically.

Volume

Counted from the source system at export, in the unit that system uses.

Years

The continuous period. Any gap is stated, never smoothed over.

Contributors

Distinct people whose work appears in the system.

De-identification

The technique applied to that source before anything leaves our systems.

Who holds the data, at every step.

We take custody, and every step names who holds the data and under which agreement.

How it works, in detail
01RightsHeld by the companyIts own systems
02ExportHeld by the companyIts own systems
03De-identifyHeld by us, under licenceA signed data-handling agreement
04StructureHeld by us, under licenceThe data licence
05Quality assuranceHeld by us, two personThe data licence
06LicenceHeld by the lab, under licenceThe downstream licence

For the companies that hold the data

Three protective questions, answered before the commercial one.

01

What actually leaves your building

Business-system records only. Never customer data, never payment or credential data, never private messages or human-resources channels. You write the exclusion list and it goes in the agreement.

02

Who holds it afterwards

We do, under a licence from you, for as long as the agreement runs. Raw identifiable copies are destroyed on a fixed schedule and the destruction is recorded.

03

What you are exposed to

You warrant that you own or hold the rights to what you give us, and that giving it to us does not breach an agreement you are already in. Where employment or privacy law applies, we tell you the steps and give you the templates.

04

What it pays

A named share of every licence your data earns, fixed in the agreement before a single file moves. It applies to renewals and reuse.

Posture, with its sources named.

Every claim on the trust page names the internal document it comes from, and we will show you that document under NDA.

  1. 01Where data sits, and under whatoperations/Chain_of_Custody.md
  2. 02The named standardoperations/De_Identification_Standard.md
  3. 03Retention and certified deletionoperations/Retention_and_Deletion.md
  4. 04Subprocessorsoperations/Subprocessors.md

Two ways in.

Tell us which side of the table you are on and we will send the relevant paperwork first.

Licence, in summary

Licensor
13101959 Canada Inc.
Field of use
Priced and granted by use, separably
Term
Defined, with renewal priced again
Exclusivity
Non-exclusive by default
Indemnity
Ours, and capped
Status
Executed as principal