Sell software company data and source code to AI companies
Last updated How we research
In short
Software companies can license source code with full git history, pull requests, issue trackers, incident postmortems and support tickets to AI companies, and Mercor publishes a range of $50,000 to $500,000 per company. Before a sale you need to strip third-party code and secrets, confirm contractors assigned their IP in writing, and remove customer data.
Key takeaways
- AI buyers most want these records from software companies: (1) repositories with full commit history, (2) pull requests with review comments and (3) issue trackers linked to commits.
- Published buyer range for software companies: $50,000 to $500,000 per company.
- Source: Mercor's published referral listing for software companies, as reported by ddiy.co, checked November 2026.
- Size buyers look for: 15 to 500 employees (Mercor's listing).
- The first rights issue to clear: Contractor-written code without a signed assignment under 17 U.S.C. section 204(a). This page covers 5 more.
- Sellers pay nothing to be assessed. We charge a success fee only when a deal completes, and the fee is agreed in writing before we introduce you to any buyer.
Software companies: what buyers look for
- Records buyers ask for
- Repositories with full commit history
- Pull requests with review comments
- Issue trackers linked to commits
- Incident postmortems and runbooks
- Support tickets and internal engineering chat
- Test suites and CI logs
- Why buyers want them
- Coding models and agents learn from how real teams change code over time, why a review rejected a change and how an incident was fixed. Public code is already widely available to labs, so private codebases with history are what buyers ask for.
- Published buyer range
- $50,000 to $500,000 per companyMercor's published referral listing for software companies, as reported by ddiy.co, checked November 2026
- Size buyers look for
- 15 to 500 employees (Mercor's listing)
- Rights issues to clear
- Contractor-written code without a signed assignment under 17 U.S.C. section 204(a)
- Customer data in logs, tickets and fixtures, held as a CCPA service provider or state-law processor
- Open source and third-party code inside your repositories
- Code written for clients under services contracts
- Secrets and credentials in commit history
- UK and EU: UK GDPR Article 28 limits a processor to the controller's instructions
Why software companies work with us
- 1
AI buyers publish ranges of $50,000 to $500,000 per company for software companies records. We tell you in one consultation where yours are likely to land.
- 2
Every buyer we introduce passes five checks, including company identity, intended use and security, before seeing even a redacted sample of your records.
- 3
You pay nothing unless a deal completes. Our success fee is agreed in writing before we introduce you to any buyer.
- 4
Your raw data never passes through us. You sign a license directly with your chosen buyer, after your own lawyer has reviewed it.
What software company data do AI companies buy?
AI companies buy software company data that shows how code changes and why. A repository with its full commit history, linked pull requests and review comments teaches a coding model far more than a snapshot of the current code.
- Repositories with full commit history and branch structure
- Pull requests with review comments and requested changes
- Issue trackers where tickets link to the commits that closed them
- Incident postmortems, runbooks and on-call notes
- Support tickets that escalated to engineering
- Test suites, CI logs and architecture decision records
DataVendor, a marketplace for code and agent tasks, says labs pay more for human-written code, complex products and systems languages such as Rust, Go, C and C++. Linked engineering records can also become agent trajectory data or evaluation tasks, which some buyers price separately.
Retired products count too. A product you closed years ago can still be useful if its repository and tickets survived, and MIT Technology Review's October 2026 reporting describes labs buying data from startups that have shut down.
How much do AI companies pay for software company data?
AI companies publish a range of $50,000 to $500,000 for software company data. That is Mercor's referral listing for software companies of 15 to 500 employees, as reported by ddiy.co in October 2026.
Real sales can land well below that. MIT Technology Review reported in October 2026 that a shut-down crypto startup received about $25,000 for its codebase, with about $15,000 more pending for its workspace data. A small codebase in a common web stack sits at the low end, and a large, long-lived product in a systems language with linked tickets sits higher. Read how to sell source code to AI companies for pricing factors.
Does selling your code give away your product?
Selling your code to an AI company does not hand the buyer your product, but it does put your code into a model you do not control. The buyer is licensing the code to train models, not to run your service, and a license can say so.
The risk to weigh is that a model trained on your code may later help someone build something similar. If you are still operating, you may prefer a license with tight use limits, or sell only once a product is retired. Companies that have closed face fewer such trade-offs, see selling data from a closed company.
Which code can you legally license?
You can license code your company owns and that no other license restricts. Under 17 U.S.C. section 201(b), code an employee writes within the scope of employment is a work made for hire, and the employer is treated as its author.
Contractors are different. The Copyright Office's Circular 30 lists nine categories of commissioned work that can be made for hire by written agreement, and software is not named among them, so contractor code generally stays with the contractor unless they assigned it. Under 17 U.S.C. section 204(a), a transfer of copyright is not valid unless it is in a writing signed by the owner.
| Code or content | Rights position | Usual approach |
|---|---|---|
| Code written by employees | Work made for hire owned by the company under 17 U.S.C. section 201(b) | Include |
| Code written by contractors | Owned by the contractor unless assigned in a signed writing | Include only with a signed assignment |
| Open source dependencies and vendored libraries | Licensed to you under each project's license | Remove or list separately in the manifest |
| Code built for a client under a services contract | Often owned by or licensed to the client | Check the contract, usually exclude |
| Commercial SDKs and licensed components | Licensed for your product only | Remove |
| Secrets, keys and credentials | Security risk | Remove from the full history and rotate |
Buyers run their own license scans, so an accurate list of third-party code in your data manifest builds trust quickly. Removing a secret from the latest commit is not enough because it remains in the history. Tools such as git filter-repo can rewrite history to remove secrets and excluded files, but run the cleanup before you count commits for the manifest, so the numbers match what is delivered.
What customer data sits in engineering records?
Engineering records often hold customer data in logs, database fixtures, support tickets and incident timelines. If you run a SaaS product, you usually hold your customers' data as their service provider or processor, and the contract limits what you can do with it.
The CCPA, at California Civil Code section 1798.140(ag), defines a service provider by a contract that prohibits retaining, using or disclosing the personal information for any purpose other than the business purposes specified. Virginia's privacy law, at Code section 59.1-579(A), says a processor shall adhere to the controller's instructions. Licensing that data to an AI company would fall outside both.
Your own privacy promises matter too. The FTC warned in February 2024 that it may be unfair or deceptive for a company to adopt more permissive data practices, such as using data for AI training, through a quiet retroactive change to its terms. Strip customer data from tickets, logs and fixtures before any sample is drawn, and see support ticket data for how buyers expect it to be cleaned.
If you hold UK or EU data
UK and EU customer data follows the GDPR processor rules. Article 28(3)(a) of the UK GDPR says a processor processes personal data only on documented instructions from the controller, and Article 28(10) treats a processor that decides its own purposes as a controller for that processing.
How does selling software company data work with Sell My Data To AI?
Selling software company data with Sell My Data To AI starts with a consultation about your repositories, languages, years of history and linked systems such as Jira, GitHub or Linear. No code leaves your systems at this stage.
We then help you prepare a manifest of repositories and exclusions, run our eight vetting checks and share a redacted sample with buyers you approve. Buyers' tools never get direct access to your live systems: a fixed export moves only after you sign the license. Book a free consultation to start.
Frequently asked questions
Do AI companies buy code from small software companies?
Do we need to remove open source code before selling?
Can we sell code while the product is still live?
Are pull request reviews worth more than the code itself?
Sources
- How to sell your company's data to AI companies, ddiy.co (figures taken from each buyer's own site), accessed November 2026
- AI training data marketplaces, DataVendor, accessed November 2026
- AI labs are buying data from dead startups to train their models, MIT Technology Review, accessed November 2026
- 17 U.S. Code section 201: ownership of copyright, Legal Information Institute, Cornell Law School, accessed November 2026
- 17 U.S. Code section 204: execution of transfers of copyright ownership, Legal Information Institute, Cornell Law School, accessed November 2026
- Works made for hire (Circular 30), US Copyright Office, accessed November 2026
- California Civil Code section 1798.140: definitions (CCPA), California Legislative Information, accessed November 2026
- Code of Virginia section 59.1-579: data controller and processor responsibilities, Virginia Law, Virginia General Assembly, accessed November 2026
- AI (and other) companies: quietly changing your terms of service could be unfair or deceptive, Federal Trade Commission, accessed November 2026
- UK GDPR, Article 28: processor, legislation.gov.uk, accessed November 2026
Book a free consultation for your firm
Tell us what you hold and when suits you. In 30 minutes we cover likely buyer interest, a realistic range and any rights issues to clear first. No records leave your systems.
Related guides
- How to sell source code to AI companies
Selling data
- Agent trajectories and RL environments explained
Data types
- Selling data from a closed or closing company
Selling data
- How much is your data worth to AI companies?
Pricing and value
- Exclusive vs non-exclusive data licenses
Selling data
- How to build a data manifest buyers will trust
Selling data