How we protect your records, your customers and your people

De-identification is the product. Every company's records go through the same gated process. We test the result and show it to you before anything is licensed.

Our commitments

  • Mutual NDA before we see a single file.
  • We act as your service provider under a data processing agreement, so you stay in control of your records.
  • Your raw exports go into a workspace used only for your company. It is encrypted and access-logged, and only named staff can open it.
  • Only de-identified records are licensed. Raw data never goes to a buyer.
  • You approve a sample of exactly what a buyer receives before any sale.
  • After delivery we delete your raw exports and the keys used to create stand-ins, and confirm it in writing.
  • Buyers are bound by contract to training and evaluation use only, with no re-identification and no onward transfer.

What we remove, replace and keep

We replace details with realistic stand-ins rather than black bars, so the records still read naturally. That keeps them useful to buyers without exposing anyone.

Data elementWhere it shows upWhat we do
People's namesEmail, chat, CRM contacts, signaturesConsistent stand-in names, so the same person reads as the same person across systems
Email addresses and phone numbersEverywhereStand-ins on fake domains; internal versus external stays clear
Street addressesShipments, invoices, CRMCity and state kept, or the first three ZIP digits; the street is dropped
GPS pings and ELD locationsTracking dataCoarsened to city level or dropped entirely
Carrier, license and tax ID numbersCarrier packets, W-9s, applicationsReplaced. Many carriers and contractors are single owner-operators, so these numbers identify a person
Bank, card and account numbersAccounting systems, remittancesRemoved
Customer and supplier namesAll systemsConsistent stand-ins unless that company consents
DatesAll systemsShifted by a secret offset in whole weeks, which keeps intervals and weekdays intact
AmountsQuotes, invoicesKept, or scaled or banded if you prefer
Signatures, photos, scanned IDsPDFs and attachmentsImages removed; text is extracted and then de-identified
Personal topics (health, family, union, immigration)Email and chatThe passage or the whole message is removed

Never collected: HR, payroll and benefits files; medical, injury and workers' comp records; consumer customer data; privileged legal communications; anything under a litigation hold.

Before and after

A freight email as it sits in a broker's inbox, and as a buyer would receive it. Highlighted text was replaced.

Original

From
Dana Whitcomb <dana@northfieldlogistics-example.com>
To
Marco Ruiz <dispatch@ruizbrostrucking-example.com>
Date
Tue, Mar 4, 2025, 7:42 AM
Subject
Load 448213: Joliet, IL to Columbus, OH

Marco, can you cover 448213 tomorrow? Pickup at Midwest Polymer, 2210 Channahon Rd, Joliet. $1,850 all-in.

Need your MC-778341 on the rate con. Call me at 815-555-0142 if the 6 AM appointment is tight.

Dana

As a buyer receives it

From
Jordan Pike <jordan.pike@broker-a.example>
To
Sam Ortega <dispatch@carrier-0412.example>
Date
Tue, Mar 25, 2025, 7:42 AM
Subject
Load L-00913: Joliet, IL to Columbus, OH

Sam, can you cover L-00913 tomorrow? Pickup at Kestrel Plastics, Joliet. $1,850 all-in.

Need your MC-000417 on the rate con. Call me at (555) 010-2231 if the 6 AM appointment is tight.

Jordan

All names, companies and numbers in this example are invented. The date moved three weeks, so it is still a Tuesday; the lane and rate are kept because they carry the business meaning.

How we test before anything ships

  1. Automated detection

    A rules-and-model detector finds names, numbers and addresses, then a language-model pass catches what it misses in context.

  2. Hand-checked sample

    People review a random sample of at least 500 documents and count anything that slipped through. We set the target before the project starts and don't ship until we meet it.

  3. Motivated-intruder test

    Someone who knows your industry tries to identify people or companies using public sources. Anything they can pin down gets generalized further.

  4. Your sign-off

    You browse exactly what a buyer receives. Nothing is licensed without your written approval.

Our public commitment

We keep de-identified data in de-identified form. We do not attempt to re-identify it, and we require every recipient, by contract, to make the same commitment and pass it on to anyone they share with.

We do not license data to entities in countries of concern under federal rules on bulk sensitive data, and every foreign buyer agrees not to transfer it onward to them.

If you believe your information appears in a dataset we handled, email privacy@sellyourcompanydata.com. We'll investigate and reply in writing.

Find out what your records are worth.

Three short steps, about two minutes, no sign-up.