Inspection, conditioning, evaluation and training are separate permissionsSee the permissions
A7 / Data RightsFor data owners, buyers and their counselAuthorize · Protect · TraceOne standard, all seven stages

Rightsbeforerecords.

Having access to information doesn't give anyone the right to transform it, test it or license it. Algorithm7 treats each of those as a separate permission, confirms it before the work begins, and carries it into everything we produce.

That protects the organizations who contribute data, and gives the labs who evaluate and license it a provenance record their legal teams can review.

01 · Access is not authority

Nine activities. Each needs its own permission.

Source ownership, processing authority, evaluation permission and training rights are separate questions. Each activity is authorized in writing and recorded before it happens. If it isn't authorized, it doesn't happen.

ActivityAuthorization coversRecorded in
ISource inspectionReviewing what exists to assess feasibility, under confidentiality.Assessment agreement
IIData ingestionWhich categories may be transferred, how, and where they are held.Supplier agreement
IIIProcessing and enrichmentParsing, linking, normalization, de-identification and annotation.Supplier agreement
IVAI models during conditioningWhether and which models may process the data, and where they run.Processing schedule
VDerived tasks and benchmarksCreating new assets from the source, and who may hold them.Supplier agreement
VISample disclosureWhether any records may be shown to prospective buyers, and in what form.Disclosure schedule
VIIControlled buyer evaluationTesting by qualified buyers, the environment used and what they may retain.Evaluation terms
VIIITraining and downstream useTraining, fine-tuning, evaluation suites and any other consumption.Buyer license
IXRetention and derived outputsRetention periods, deletion, sublicensing and rights in derived outputs.Both agreements
02 · Provenance

Rights and restrictions travel with every derived product.

As information moves through all seven stages of Algorithm 7, its rights move with it. A restriction set on the source record doesn't disappear when the record becomes a task, a training example or a delivery. Select a restriction to follow it through each stage.

01Raw recordHeld under the supplier agreement
Evaluation only until licensedNo sublicensingProcessing in approved regionsDelete after the retention period
02Conditioned recordStructured, de-identified
Evaluation only until licensedNo sublicensingProcessing in approved regionsDelete after the retention period
03Evaluation taskDerived test with hidden reference
Evaluation only until licensedNo sublicensingProcessing in approved regionsDelete after the retention period
04Training exampleDerived learning asset
Evaluation only until licensedNo sublicensingProcessing in approved regionsDelete after the retention period
05Licensed deliveryWhat the buyer receives
Evaluation only until licensedNo sublicensingProcessing in approved regionsDelete after the retention period

Buyers may test derived tasks, but nothing may be used for training until a license grants it.

03 · Protection, stated honestly

De-identification reduces risk. It doesn't eliminate it.

Removing names doesn't guarantee anonymity; combinations of details can still identify someone. So we assess re-identification risk per dataset and combine several safeguards, rather than relying on any one.

Removed

Names and direct identifiers

Contact details and addresses

Credentials and secrets

Pricing and commercial terms

Confidential IP outside scope

Generalized

LocationsRegion bands

DatesRelative intervals

PeopleRoles

Rare attributesCoarsened or dropped

ValuesSynthetic, where needed

Also required

Re-identification risk assessment

Expert review for sensitive data

Access controls on every product

Contractual limits on re-identification

Leakage checks before release

04 · Sensitivity

More sensitive data, more controlled evaluation.

We don't promise that buyers can never encounter sensitive information unless processing, review and access controls can enforce it. Handling is set by sensitivity, not convenience.

Standard

Operational and technical data with low personal content after conditioning.

Rights-cleared samples may be shared

Standard conditioning and review

Licensed delivery to approved buyers

Elevated

Data with personal, financial or commercially sensitive content.

Evaluation through blind benchmark or API grading

Expert re-identification review

Delivery under strict access terms

Restricted

Health, clinical or other regulated data.

Restricted processing environment

Additional consent or legal authority as required

Controlled evaluation only, no downloadable sample

Expert review before any release

Anonymizationis notpermission.

Removing identifiers doesn't override an NDA, satisfy a consent requirement or create a licensing right. Authorization comes first. Protection is applied on top of it, never instead of it.

05 · Agreements

Three documents. Each one narrower than the last.

What a data owner authorizes sets the outer limit. Evaluation terms and buyer licenses can only ever sit inside it.

Supplier agreement

What the data owner authorizes

Data categories and ingestion

Permitted processing, including AI models

Derived assets and sample disclosure

Evaluation and licensing scope

Compensation, retention and deletion

Evaluation terms

What a buyer may do while testing

Qualified buyers only

Evaluation environment and access

No training on evaluation materials

What may be retained afterwards

Confidentiality of results

Buyer license

What a buyer may do after licensing

Defined permitted uses

Supplier restrictions inherited

Sublicensing and derived outputs

Provenance documented per delivery

Conditioned products, never raw originals

06 · Questions

For counsel, on either side.

The data owner continues to own its original records and IP. Algorithm7 holds only the limited rights it was granted, and buyers receive a license to conditioned products within those limits.
No. Evaluation terms prohibit training on evaluation materials. Training requires a separate license, and only where the supplier agreement permits it.
Only if the supplier agreement authorizes it, and only the models and environments it specifies. Use of AI during conditioning is its own permission.
They are excluded. A record is only reconsidered if the missing permission, such as a consent or a vendor approval, is obtained in writing.
Buyers evaluate and license conditioned products. Where an agreement permits original evidence to be included, it is scoped explicitly, protected, and subject to the same restrictions.
For AI labsProvenance your legal team can review.Request an EvaluationFor data ownersApprove every use. Keep ownership.Assess Your Dataset