Why Mercor’s AI Training Data Ambitions Matter for SMEs

The Rise of AI Training Data Monetization

A recent report from Gizmodo reveals that Mercor, a fast-growing AI training data platform, is exploring ways to purchase or repurpose employee work data—including documents, code, and other outputs from past roles. While this may sound like a niche issue, it highlights a growing trend with serious implications for businesses, especially SMEs.

For companies that rely on intellectual property, proprietary processes, or sensitive customer data, the idea of third parties profiting from internal work is unsettling. But how does this affect your business, and what steps can you take to protect your assets?

The Hidden Risks for SMEs

Many SMEs assume that their internal data is safe once an employee leaves—but that’s not always the case. Consider these potential risks:

• Intellectual Property (IP) Leakage: If former employees’ work (e.g., reports, code, or designs) is scraped and sold to AI training platforms, your proprietary knowledge could end up in public datasets.
• Compliance Violations: Depending on your industry, regulations like GDPR or sector-specific laws may require you to ensure employee data isn’t repurposed without consent.
• Security Gaps: Even if data isn’t sold, improperly handled or outdated employee outputs could expose vulnerabilities in your systems.
• Reputational Damage: If customers or partners discover that their data (or your internal processes) was used to train AI without oversight, trust erodes quickly.

How Mercor’s Model Fits Into the Bigger Picture

Mercor isn’t alone in its ambitions. Companies like Scale AI and Appen already monetize human-generated data for AI training, often by crowdsourcing tasks from gig workers. The difference now? The scope is expanding to include structured employee work—raising questions about ownership and consent.

For SMEs, this trend underscores the need for clear data governance policies and employee agreements that define who owns work outputs and how they can be used post-employment.

Practical Steps to Safeguard Your Business

You don’t need a Fortune 500 budget to protect your data. Here’s what you can do:

• Audit Your Data: Identify which documents, code, or processes contain sensitive or proprietary information. Limit access to these files on a need-to-know basis.
• Update Employment Contracts: Explicitly state that employee work products remain the company’s property, even after departure.
• Implement Data Retention Policies: Automate the deletion or archiving of old files to reduce exposure.
• Train Employees: Ensure staff understand what data can and cannot be shared externally—even inadvertently.
• Monitor Third-Party Tools: If you use cloud services or collaboration platforms (e.g., GitHub, Google Workspace), review their data-sharing policies to avoid unintended leaks.

Where Infojef Can Help

At Infojef, we understand that data protection isn’t just an IT problem—it’s a business imperative. Whether you need help: - Securing your cloud environments against unauthorized data scraping - Auditing your data storage and retention policies - Training your team on cybersecurity best practices - Implementing robust IT infrastructure that minimizes risks

…we’re here to support your goals. Protecting your intellectual property starts with the right IT strategy—let’s build one together.