Selling Data When a Startup Shuts Down: What Is Possible

A shutting-down startup can sometimes sell data it owns and has the right to license, usually as part of an asset sale or a wind-down plan. It cannot sell personal data or customer content in ways that contradict its privacy notice and contracts, and insolvency rules may decide who controls the assets.

When a startup closes, its data often looks like the only asset left that someone might want. That is sometimes true, and a few shutdowns do produce a real sale. It is also a situation in which people are tempted to cut corners, with time pressure, unpaid staff and no budget for lawyers. This article describes what is realistically possible, what usually is not, and the order in which to do things.

Can a startup sell its data when it shuts down?

Yes, in some cases, but only the data it actually has the right to sell. Closing the company does not remove the contractual and legal restrictions attached to that data.

The key distinction is between data the company owns and data it merely holds. Internal operational records, authored content, models trained on data the company had the right to use, and datasets built from its own activity are the most plausible candidates. Customer content, personal information collected under promises about use, and data held for a client are generally much more restricted.

A closing company also has other claims on its assets. Depending on how it shuts down, a formal process may put an administrator, liquidator or trustee in charge of what is sold and who is paid first. The founders may no longer have the authority to sell anything on their own.

This article is general information and not legal advice. The rules differ by country and by type of wind-down, so speak to a qualified lawyer early, ideally before the last employee leaves.

What are the main ways a shutdown happens, and how does each affect a data sale?

The route matters because it decides who has authority, how fast things move and what a buyer will ask for. The main routes are a voluntary wind-down, a formal insolvency process and a sale of the business or its assets.

Voluntary wind-down

Directors close the company in an orderly way, pay creditors as far as possible and distribute what remains. Directors typically keep more control, but they must still respect creditor claims and legal duties. A data sale is possible if it is authorised and the proceeds are handled properly.

Formal insolvency

An appointed professional takes control of assets. Any sale of data usually goes through them, and they will want to know that the sale is legal, because they carry responsibility. Expect more process and slower timing.

Asset sale or acqui-hire

A buyer takes the technology, the team or both. Data is often part of the discussion. Privacy rules may follow the data to the buyer, which is why many buyers insist on reviewing how it was collected.

Which data can be sold, and which cannot?

Sellable data is data the company owns, collected on a basis that permits the new use. Data that is not sellable includes anything covered by contract, privacy promises or third-party rights.

Likely candidates, subject to checks:

• Company-authored content such as documentation, templates and knowledge bases.
• Operational data about the company's own activity that has no personal content.
• Evaluation material, test suites and simulated tasks the team built.
• Aggregated or properly de-identified datasets where the legal basis for the preparation and sale is clear.

Usually not sellable:

• Customer content held under terms that treat it as the customer's property or as confidential.
• Personal data collected under a privacy notice that promised limited use, or promised deletion on closure.
• Data from vendors, partners or platforms whose terms forbid resale.
• Anything subject to a legal hold, an investigation or a regulatory obligation.
• Credentials, secrets and security logs.

For the ownership principles behind this list, see who owns company data.

What do customers and privacy promises mean for a closing company?

They mean that the promises made when the data was collected still apply, even if the company no longer exists in the same form. Many privacy notices state what happens to data if the business is sold or closed, and regulators may take a dim view of ignoring them.

Laws such as the GDPR and the CCPA/CPRA place conditions on what a company may do with personal information, and a shutdown does not suspend them. In some jurisdictions the transfer of personal data in a sale of business assets is allowed on conditions, such as the buyer using it consistently with the original promises. The details vary, so do not assume that insolvency is a loophole.

Customers also have contractual rights. Enterprise agreements often include data return or deletion clauses on termination. If the startup is ending those agreements anyway, the question is not only whether it can sell the data, but whether it must delete or return it instead. Meeting those obligations should come first.

What should the founders do first?

The founders should freeze data handling, get legal advice and inventory what exists, in that order. Rushed exports and informal deals are the main sources of avoidable harm.

1. Stop deleting and stop copying. Preserve the current state of systems, and avoid casual exports to personal devices.
2. Secure access. Keep a short list of people with access, and make sure someone remains responsible for security as staff leave.
3. Get legal advice on the wind-down route, directors' duties and who has authority to sell assets.
4. Run an inventory. A quick pass using a data inventory shows what exists, where and under which terms.
5. Check customer obligations: return, deletion and notification duties.
6. Identify a shortlist of datasets that might be sellable, and rate each green, amber or red.
7. Prepare one or two candidate datasets properly, including de-identification where relevant.
8. Approach buyers, with the legal basis documented in advance.

Keep paying attention to people, because the human side of a shutdown is where data most often escapes. Departing employees often hold passwords and local copies, and an offboarding checklist matters more than usual.

How do you sell it if you have something to sell?

You sell it the same way any seller does, with extra care about authority and documentation. A buyer will want proof that the person selling can sell.

Prepare a data card, a representative sample, clear license terms and a written statement of the legal basis, signed off by whoever has authority. Ask whether a non-exclusive license is appropriate. A wind-down seller may be tempted to sell exclusively for a single payment, but that choice removes future flexibility, and it should be made with advice. See exclusive vs non-exclusive licensing for the trade-offs.

On LogitAtlas, listing is free, sellers keep ownership and attach their own license terms, and payment is held in escrow until the buyer confirms delivery or 72 hours pass. The platform commission is 10%, deducted when an order completes. If an insolvency professional is in charge, they should be the one who creates the listing and approves terms. The sell page shows the process.

What should be documented for a clean exit?

Whatever you decide, keep a short closing file. It should record which datasets were reviewed, which were sold or deleted and why, who approved each decision, and what customers were told. Include the deletion confirmations from any vendors that held copies.

This file protects the people who signed off. Months later, a customer, a regulator or a buyer may ask what happened to specific data, and a founder who has moved on to another job will be glad of a clear answer on paper. Store it somewhere that outlives the company's own systems, with the lawyer or the responsible officer.

What are the realistic expectations on price and timing?

Expect modest and uncertain returns, and a timeline shaped by legal authority rather than by buyer interest. Distress does not increase the value of data, and buyers know it.

A buyer who senses that the seller must sell quickly will often seek a discount. A buyer who senses unclear rights will walk away. Both effects are stronger in a shutdown, which is why early preparation is so valuable. Companies that start the inventory and rights check while they still have staff, budget and working systems are in a far better position than those who begin after the last payroll run. If rights are clean and the data is well documented, you remove the main reasons to discount.

Employees who were laid off, contractors whose contracts ended and vendors who were never paid may all hold access or copies. Revoke access as part of the exit, and confirm deletion from every tool. Also be realistic about alternatives. In many shutdowns, the best use of the data is to delete it properly, honour customer obligations and move on. A well-handled deletion protects the founders from later claims, and that protection may be worth more than a small sale.

Frequently asked questions

Do the founders automatically own the company's data?

No. The company owns what it has the right to own, and founders do not personally hold the company's assets. Customer data may belong to customers. Who can authorise a sale depends on the wind-down route, and may be an appointed insolvency professional rather than the founders.

Can a bankrupt startup sell customer data to pay creditors?

Not freely. Customer content and personal data remain subject to contracts, privacy promises and legal rules. In some cases a sale of business assets can include personal data on conditions. This is highly specific to jurisdiction, so a lawyer must advise before any such sale.

Is it better to delete the data or try to sell it?

It depends on what the data is and what you owe. If you cannot show a clear right to sell, or the value is small compared with the risk, deletion done properly and documented is often the safer route. Sell only what is clearly yours and clearly licensable.

Who should I talk to first when we decide to close?

Start with a lawyer who handles insolvency or corporate wind-downs in your jurisdiction, and with whoever is responsible for privacy and security. They can tell you who has authority, what customers are owed and what can be sold. Do this before making any approach to buyers.

Can a buyer take over the whole customer database?

Possibly, in an asset sale where the privacy notice and the law allow it, but with conditions, and not in every country. Many buyers will want to see how the data was collected and what customers were told. Never assume a customer database is simply transferable.

If you have decided that some of your data is clean and licensable, the free ten-question valuation is a quick way to get a first view.