Corpus data licensing review: is datacorpus.ai legit, and when does it pay?

Corpus, the company behind datacorpus.ai, says it licenses a company’s archived email, chat, documents and business-system records itself and pays once, with “No fees, no revenue share, no ongoing obligation”, as of October 2026. Its pages put the payment at $100K to $2M or more, depending on headcount. Its website domain was registered in August 2026, and the site names no one who runs it.

Who is behind Corpus, and how new is it?

A company called Corpus Data, Inc., which its privacy policy says is based in the United States. That policy is dated August 20, 2026, and the datacorpus.ai domain was registered on August 7, 2026. When Data Licensing Report checked on October 5, 2026, the site named no founders, executives or investors, gave no street address or state of incorporation, and had no terms of service page. Its contact page lists deals@corpus.co and security@corpus.co, on a different domain from the website.

Corpus’s track-record claims start earlier than its website. Its home page says its payout ranges “reflect closed engagements between 2023 and 2026”, and its get-paid page reports figures for the “Last 24 months.” A business can trade under a new name or domain, but the site does not say whether that happened here. The legal entity’s state registration, the names of the people who would sign, and a reference from a past seller would settle it.

Other businesses in this market have similar names. Corpus Bridge, at corpusbridge.com, helps businesses seek licensing bids through a brokerage partner for a success fee, and its site does not mention Corpus or datacorpus.ai. Check the domain on any email before replying.

Where do Corpus’s own pages disagree?

On minimum size, payment timing and the top payout, as of October 5, 2026:

Question	One Corpus page says	Another Corpus page says
How big must the company be?	“We license from companies with 30+ people” (apply form)	“25+ employees” (get-paid page); the payout table also starts at 25 (home)
When is the cash wired?	“Intake to wire 30–60 days” (home)	“Cash wired 30–60 days after delivery” (get-paid page); payment on days 40 to 60, counted from intake (how it works)
How much can it pay?	“Get paid up to $1 million” (home-page headline)	“Get paid $100K–$2M” (get-paid headline); “Largest to date $2M” (home)

The timing row matters most. Thirty to sixty days from intake and thirty to sixty days after delivery are different promises, because delivery itself falls on days 35 to 50 of Corpus’s own schedule. Put the payment date in the agreement, counted from a named event.

What do Corpus’s published payouts show?

Four licenses of $850,000 to $2 million, with no names or dates. Its payouts page lists:

Seller, as Corpus describes it	Employees	Years covered	Paid
Freight and logistics company, Ohio	340	2016–2024	$850,000
Healthcare administration group, Texas	1,180	2014–2025	$1,400,000
Industrial manufacturer, Michigan	760	2012–2024	$1,100,000
Financial services firm, New York	2,400	2013–2025	$2,000,000

Corpus says the quotes beside them are published with client permission and “company identities withheld by agreement.” All four amounts are above the $150K to $650K average payout that its get-paid page gives for the last 24 months, so they are not typical even of Corpus’s own figures. No seller, buyer or deal date can be checked. How much is my company’s data worth? sets provider figures like these side by side.

Is the price fixed once we sign, and what triggers payment?

Corpus’s pages leave room for the price to move. The written range comes from a two-minute description of your systems, with “No credentials, no exports”, and the license agreement is signed on days 5 to 15. The anonymization review, when redaction runs on the actual records, comes after that, on days 15 to 35. Its pages also carry the line “Payouts subject to diligence and anonymization review.” Ask whether the price in the agreement is fixed, what diligence could change it, and what happens if the review removes a large share of the records.

Payment “clears on delivery confirmation”. The pages do not say who confirms delivery. Larger engagements “can be structured as an upfront tranche plus a delivery tranche,” with no split published. How long until I get paid? covers what to fix in writing.

What does Corpus ask us to leave out?

Six categories, listed on its security page under “What we ask you to keep out of scope”:

• patient health records or anything covered by HIPAA;
• payment card data and bank credentials;
• government-issued identification numbers;
• customer PII in identifiable form;
• employee HR files, compensation and performance records;
• anything under active legal hold or NDA restriction.

Because Corpus asks you to keep these out, they have to be found before anything transfers, not left to its redaction. A healthcare administrator or financial firm, two of the sectors on its payouts page, would need to know where such records sit in email and shared drives. Can I leave out certain customers, people or folders? covers how.

For everything else, Corpus says automated multi-pass redaction plus a human spot-audit removes names, email addresses, phone numbers, postal addresses, government IDs, employee numbers, credentials and card or bank details. You then receive a redaction report with before-and-after samples and sign off in writing before transfer. The home page says “Nothing sensitive ever leaves your tenant”, but the pages do not say on whose systems the redaction runs or who carries out the spot-audit. The security page also says nothing on it “is a warranty”; the binding terms are in the agreement. What “anonymized” means compares providers’ methods.

Who ends up using our data?

Corpus says the data stays with it. Its About page says “You license it to us, once, and it goes nowhere else,” and that the corpora are used “to train and evaluate business AI systems — never resold, never passed on.” The home page says it is used “to train and evaluate leading AI models.” Neither page says whose models these are, or whether Corpus trains its own. The license is non-exclusive and you keep the originals, so you remain free to license the same records to someone else.

What should we ask Corpus before signing?

Ask who signs, when payment falls due and where your records go:

1. Which legal entity signs, where is it registered, and who are its officers?
2. Do the corpus.co email addresses belong to the same company as datacorpus.ai?
3. Is payment due 30 to 60 days from intake or from delivery, and who confirms delivery?
4. Where does redaction run, and who performs the human spot-audit?
5. Whose models will be trained on our records, and can anyone else access them?
6. Can we speak with one of the sellers on the payouts page?

If Corpus has already sent terms, the offer benchmark lays out their payment trigger, exclusivity and conditions term by term.