Sell financial services data to AI companies
Last updated How we research
In short
Financial services firms can license research notes, credit and investment memos, compliance reviews and procedure manuals to AI companies, but we have found no buyer that publishes a price range for the sector. Customer and market data carry the heaviest rules: GLBA notice and opt-out duties, SEC Regulation S-P, Bank Secrecy Act limits on revealing suspicious activity reports, insider trading law and PCI DSS.
Key takeaways
- AI buyers most want these records from financial services firms: (1) investment research notes and memos, (2) credit and underwriting memos, de-identified and (3) compliance testing reports and file reviews.
- No AI buyer publishes a price range for financial services firms yet, so value depends on volume, years of history, structure and how cleanly the rights can be shown.
- Size buyers look for: No sector-wide minimum published. Mercor's listing for investment firms asks for 5 or more staff.
- The first rights issue to clear: GLBA privacy notice and opt-out duties before sharing customer information with nonaffiliated third parties. This page covers 5 more.
- Sellers pay nothing to be assessed. We charge a success fee only when a deal completes, and the fee is agreed in writing before we introduce you to any buyer.
Financial services firms: what buyers look for
- Records buyers ask for
- Investment research notes and memos
- Credit and underwriting memos, de-identified
- Compliance testing reports and file reviews
- Policy and procedure manuals
- Complaint case files, de-identified
- Model documentation and validation reports
- Why buyers want them
- Finance models need examples of analysts and credit officers reasoning from evidence to a decision. Memos, reviews and the comments that challenged them are written by specialists and rarely published.
- Size buyers look for
- No sector-wide minimum published. Mercor's listing for investment firms asks for 5 or more staff
- Rights issues to clear
- GLBA privacy notice and opt-out duties before sharing customer information with nonaffiliated third parties
- SEC Regulation S-P limits disclosure of nonpublic personal information by broker-dealers, funds and registered advisers
- Bank Secrecy Act: no disclosing a SAR, or information revealing one, under 31 CFR 1020.320(e)
- Material nonpublic information, and the policies Advisers Act Section 204A requires
- PCI DSS card data rules and market data vendor licenses restricting redistribution
- UK and EU: UK MAR unlawful disclosure and POCA section 333A tipping off for UK firms
Why financial services firms work with us
- 1
AI buyers are licensing records from financial services firms to train models on real work. We tell you in one consultation whether yours are in demand.
- 2
Every buyer we introduce passes five checks, including company identity, intended use and security, before seeing even a redacted sample of your records.
- 3
You pay nothing unless a deal completes. Our success fee is agreed in writing before we introduce you to any buyer.
- 4
Your raw data never passes through us. You sign a license directly with your chosen buyer, after your own lawyer has reviewed it.
What financial services data do AI companies buy?
AI companies buy financial services data that shows specialist reasoning from evidence to a decision. A credit memo that sets out the case, the credit committee's challenge and the final terms is the kind of document no public source contains.
- Investment research notes and investment committee memos
- Credit and underwriting memos, with customer details removed
- Compliance testing reports and file review findings
- Policy and procedure manuals
- Complaint case files, de-identified, with the final decision
- Model documentation and validation reports
Firm-written manuals, procedures and model documentation are the simplest to clear. Anything built around a named customer or a live market position needs much more work. See document and form data for how buyers use structured financial documents.
Model documentation and validation reports are often overlooked. They explain how a model was built, tested and challenged, and they rarely contain customer data, though they may describe proprietary methods you want to keep out. Complaint files are another strong example once de-identified, because they record the issue, the investigation and the final response in order.
How much do AI companies pay for financial services data?
We have found no AI buyer that publishes a price range for financial services data. The buyers compared by ddiy.co in October 2026 give company-wide figures, and its report of Mercor's listings mentions investment firms with a minimum of 5 staff but no payout range.
Company-wide figures give some context. micro1 publishes $100,000 to $2 million or more, Handshake AI reports $100,000 to $4 million paid to date and Scale AI gives an illustrative $10,000 to $1 million or more, all as reported by ddiy.co. None of these is a quote for a financial firm, and a free data valuation is the way to get a realistic range.
Can a financial institution share customer data under GLBA?
A financial institution can share customer information with nonaffiliated third parties only within the Gramm-Leach-Bliley Act's Privacy Rule. The FTC says financial institutions must tell customers about their information-sharing practices and explain their right to opt out if they do not want their information shared with certain third parties.
Securities firms have a parallel rule. SEC Regulation S-P applies to brokers, dealers, investment companies and SEC-registered investment advisers, and 17 CFR 248.10(a)(1) bars them from disclosing nonpublic personal information about a consumer to a nonaffiliated third party unless the notice and opt-out conditions are met.
The GLBA Safeguards Rule also requires an information security program with administrative, technical and physical safeguards for customer information. Combined with the privacy notices in force when the data was collected, which Frankfurt Kurnit Klein and Selz says companies must comply with, these rules make customer-level data a poor candidate for licensing. Exclude it or take specialist advice.
Does material nonpublic information in your files stop a sale?
Material nonpublic information in your files does not stop a sale, but every document containing it must come out. Section 204A of the Investment Advisers Act requires advisers to establish, maintain and enforce written policies reasonably designed to prevent the misuse of material nonpublic information in violation of the securities laws.
Deal files, research on listed issuers before publication and investment committee papers can all contain material nonpublic information at the time they were written. The safe approach is to exclude recent material entirely and include older research only after compliance has reviewed it. Record the review date and reviewer for each batch, so you can show the buyer and your regulator how each decision was made.
Recordkeeping rules still apply to the originals. SEC Rule 17a-4(b) requires broker-dealers to preserve records such as originals of communications received and copies of communications sent for at least three years, the first two in an easily accessible place, so a license should only ever involve copies.
| Record | Rule | Usual approach |
|---|---|---|
| Customer account and transaction data | GLBA Privacy Rule and Regulation S-P | Exclude |
| Deal files and unpublished research | Insider trading law and Advisers Act Section 204A policies | Exclude recent material, compliance review for older files |
| Suspicious activity reports and related notes | 31 CFR 1020.320(e) SAR confidentiality | Exclude |
| Card data in records or call recordings | PCI DSS Requirement 3.3.1 | Exclude or redact |
| Market data from vendor terminals | Vendor license terms | Remove pasted data, keep the analyst's commentary |
| Policies, procedures and model documentation | Firm-owned | Include |
What other financial services rules affect a data sale?
Suspicious activity report confidentiality and card data rules also affect a financial services data sale. Under 31 CFR 1020.320(e)(1)(i), no bank, and no director, officer, employee or agent of a bank, may disclose a SAR or any information that would reveal the existence of a SAR, so all reporting records must be excluded.
Firms that record calls should check card data. The PCI Security Standards Council says storing card validation codes in any digital audio recording after authorization breaches PCI DSS Requirement 3.3.1. Market data vendor licenses commonly restrict redistribution, so pasted prices and terminal screenshots should come out of research notes. Nixon Peabody's October 2026 alert also advises buyers to start with a limited sample in a controlled environment, which suits regulated sellers too.
If you hold UK or EU data
UK firms face market abuse and tipping off rules as well. The FCA lists unlawful disclosure of inside information as one of the civil offenses under UK MAR, and section 333A of the Proceeds of Crime Act 2002 makes it an offense in the regulated sector to disclose a suspicious activity report in a way likely to prejudice an investigation. Customer data falls under UK GDPR and customer confidentiality duties.
How does selling financial services data work with Sell My Data To AI?
Selling financial services data with Sell My Data To AI starts with a consultation about your document stores, the years covered and your compliance team's view. We help you build an exclusion list and data manifest your chief compliance officer can sign off before any buyer is involved.
We verify every buyer's identity, intended use, security and retention commitments before they see a sample, see how we vet. You sign the license directly with your chosen buyer. Book a free consultation to start.
Frequently asked questions
Is there a published price for financial services data?
Can a bank or lender license customer data for AI training?
Can investment research be licensed to AI companies?
Do compliance teams need to approve a data sale?
Sources
- How to sell your company's data to AI companies, ddiy.co (figures taken from each buyer's own site), accessed November 2026
- Gramm-Leach-Bliley Act, Federal Trade Commission, accessed November 2026
- 17 CFR 248.10: limits on disclosure of nonpublic personal information to nonaffiliated third parties (Regulation S-P), Legal Information Institute, Cornell Law School, accessed November 2026
- 17 CFR 248.1: purpose and scope (Regulation S-P), Legal Information Institute, Cornell Law School, accessed November 2026
- 15 U.S. Code section 80b-4a: prevention of misuse of nonpublic information, Legal Information Institute, Cornell Law School, accessed November 2026
- 17 CFR 240.17a-4: records to be preserved by certain exchange members, brokers and dealers, Legal Information Institute, Cornell Law School, accessed November 2026
- 31 CFR 1020.320: reports by banks of suspicious transactions, Legal Information Institute, Cornell Law School, accessed November 2026
- Are audio/voice recordings permitted to contain sensitive authentication data? (FAQ 1210), PCI Security Standards Council, accessed November 2026
- Market abuse, Financial Conduct Authority, accessed November 2026
- Proceeds of Crime Act 2002, section 333A: tipping off in the regulated sector, legislation.gov.uk, accessed November 2026
- Selling company data for AI training: what to know before you say yes, Frankfurt Kurnit Klein and Selz, accessed November 2026
- Shopping for AI training data: five diligence questions before you buy, Nixon Peabody, accessed November 2026
Book a free consultation for your firm
Tell us what you hold and when suits you. In 30 minutes we cover likely buyer interest, a realistic range and any rights issues to clear first. No records leave your systems.
Related guides
- Can you legally sell company data for AI training?
Legal and compliance
- CCPA, state privacy laws and GDPR when selling data for AI
Legal and compliance
- Is selling company data to AI safe? The real risks
Legal and compliance
- AI data licensing agreement checklist
Legal and compliance
- How much is your data worth to AI companies?
Pricing and value
- De-identification for AI training data
Legal and compliance