Data licensing guide
By industry

Licensing healthcare data for AI: practices, imaging centres and digital health

By Ade Molajo · Updated · How we check figures · Not legal advice · Not reviewed by a lawyer

Quick answer

Healthcare is one of the most sought-after sectors. Mode takes medical practices from 10 staff, and Mercor lists three healthcare types: medical practices ($80K–$820K), imaging centres ($80K–$620K) and digital health companies ($100K–$900K). They want de-identified patient records, imaging with reports, and consented visit recordings. Health data has the strictest rules of any sector, so de-identification and a lawful basis come before any licence.

$80K–$900K
across Mercor's three healthcare listings
10+
staff: Mode's minimum for medical
De-identified
is what every healthcare buyer asks for
Strictest
data rules of any sector

01What the programmes publish for healthcare

Published ranges that apply to healthcare organisations: micro1 tiers from $100K to $2M and up; Mode $100K to $5M; Mercor’s Medical Practice listing $80K to $820K; Mercor’s Imaging Center listing $80K to $620K; Mercor’s Digital Health listing $100K to $900K.$0$1M$2M$3M$4M$5Mmicro1$100K–500K · $500K–2M · $2M+micro1.ai/data-partnerships · 30 Oct 2026Mode$100K–$5M per companydata.mode.inc · 30 Oct 2026Mercor: Medical Practice$80K–$820Kdata.mercor.com/refer · 30 Oct 2026Mercor: Imaging Center$80K–$620Kdata.mercor.com/refer · 30 Oct 2026Mercor: Digital Health$100K–$900Kdata.mercor.com/refer · 30 Oct 2026
Each programme’s own published range, checked 30 October 2026. Ranges, not offers.
What it wantsSizeLocationRange
Mercor: Medical Practice or Health System"De-identified patient records with years of physician notes"10+ clinicians or 2,500+ patientsUS preferred; other countries considered$80K–$820K
Mercor: Imaging & Diagnostics Center"De-identified imaging studies and diagnostic tests, together with their reports"Any sizeUS preferred$80K–$620K
Mercor: Digital Health Company"Consented recordings of patient visits, with transcripts and notes"10–500Anywhere$100K–$900K
ModeEmail, documents, CRM, billing and other records10+ (medical)US strongest; others case by case$100K–$5M
micro1SOPs, knowledge bases, project histories30+ full-timeUS first; strong UK demandTiers $100K–500K to $2M+

Each programme's own pages, checked 30–31 October 2026. Ranges, not offers. Mercor's data page also lists healthcare among its target industries, naming clinical notes, claims and intake forms.

Where these records usually live

Clinical systems

  • EMIS
  • SystmOne
  • Epic
  • athenahealth

Practice admin

  • Cliniko
  • Semble

Documents

  • SharePoint
  • Google Drive

Examples of common tools, to help you find your records. Product names and logos belong to their owners; no affiliation or endorsement.

02Health data has the strictest rules

Every healthcare buyer asks for de-identified data, and for good reason.

  • UK: health data is special category data under UK GDPR, which needs an extra condition on top of a lawful basis. The common-law duty of patient confidentiality also applies, and organisations handling patient information follow the Caldicott Principles. Data you hold on behalf of the NHS or another organisation may not be yours to license at all.
  • US: HIPAA allows de-identified data to be used outside its rules only if it meets one of two standards, Safe Harbor or Expert Determination. See the HHS de-identification guidance.
  • Recordings: consent to record a visit for care isn't consent to license it for AI training. Mercor's digital health listing asks specifically for consented recordings.

Properly de-identifying clinical notes is hard: free text is full of names, dates and details that can identify someone. Ask each programme exactly how it de-identifies, to what standard, and who carries the risk if it fails.

03What a healthcare organisation can realistically license

Healthcare: usually licensable (Clinical pathways and protocols; Scheduling, intake and admin workflows; Billing and coding procedures; Records de-identified to a recognised standard) versus check first or leave out (Identifiable patient records; Anything without a lawful basis for health data; Recordings without patient consent; Records you hold for another organisation).Usually licensableClinical pathways and protocolsScheduling, intake and admin workflowsBilling and coding proceduresRecords de-identified to a recognisedstandardCheck first, or leave outIdentifiable patient recordsAnything without a lawful basis for healthdataRecordings without patient consentRecords you hold for another organisation
A starting point for scoping, not a legal test.

The safest material is operational: clinical pathways and protocols your team wrote, scheduling and intake workflows, billing and coding procedures. Patient-level data is possible only de-identified to a recognised standard, with a lawful basis, and with advice.

04Before you apply

  1. Work out which records you control, and which you hold for someone else.
  2. Talk to your data protection officer (and Caldicott Guardian, if you have one).
  3. Ask each programme for its de-identification method and standard in writing.
  4. Take legal advice before anything patient-level is scoped.

This is general information, not legal advice, and it hasn't been reviewed by a lawyer.

05Get the free guide

The Data Licensing Guide for Healthcare Organisations covers it in a PDF for healthcare organisations: what can be licensed, what patient confidentiality keeps out, each programme's published figures and Mercor's three healthcare listings, with a worked example and the questions to ask before you sign.

06Check which programmes you're likely to match

Our free fit check asks about your size, location and records. The programme decides.

07Questions people ask

Can a medical practice sell patient data to AI companies?

Not identifiable patient data. The buyers ask for de-identified records, and de-identification has to meet a recognised standard, such as HIPAA's in the US. In the UK, health data is special category data and patient confidentiality applies too.

How small a practice can apply?

Mode's minimum for medical is 10 staff. Mercor lists practices with 10+ clinicians or 2,500+ patients, and imaging centres of any size.

Can UK practices apply?

Mercor prefers the US for practices and imaging but considers other countries for practices; digital health is open anywhere. Mode reviews non-US companies case by case. NHS-held data raises extra questions, so take advice.

What about recordings of patient visits?

Mercor's digital health listing asks for consented recordings, with transcripts and notes. Consent to record for care isn't the same as consent to license for AI training.

Sources

Check which programmes you’re likely to matchA few short questions, about a minute. Free, no sign-up. The programme decides who qualifies.trackimpact.io/data →