Updated October 2026
Grepped review
Grepped takes a read-only copy of the records a business already keeps, strips out customer names and personal details, packages it and resells it to AI labs and research teams. It is run by Grepped AI, Inc. in San Francisco, sets no minimum headcount, and asks for one short form about your systems before it makes an offer.1,2,3,4,5
Its own site code calls its estimator deliberately optimistic, above all for firms of 100+ people.6
Key facts
Grepped in its own words and others'
| Fact | Value and source |
|---|---|
| What Grepped buys | Messages, codebases, documents, business records and task histories, from Slack, Teams, Gmail, Outlook, GitHub, Jira, Google Drive, SharePoint, Notion, Salesforce, HubSpot, QuickBooks, Xero, Zendesk, Asana and ServiceNow |
| Grepped process | A short estimate from team size, founding year and revenue; a form of about 10 minutes on your systems and files; an offer and agreed scope; then read-only access to the approved sources |
| How Grepped handles data | Read-only access to approved sources only, and any system, folder or record type can be left out; names, emails and phone numbers removed; originals deleted after processing; processed-data retention set in the agreement |
| Who receives Grepped data | Licensed to AI labs and research teams to train models; not published and not sold to the company's competitors |
| Grepped company details | Grepped AI, Inc., a Delaware corporation, 564 Castro Street, San Francisco; Delaware law; terms updated 2026-10-14 |
What does it want?
The records Grepped takes
Grepped wants the working record of the business: chat and email from Slack, Teams, Gmail and Outlook, code and its history from GitHub and Jira, documents from Google Drive, SharePoint and Notion, records from Salesforce, HubSpot, QuickBooks and Xero, and tickets and tasks from Zendesk, Asana and ServiceNow. It says what makes this valuable is the steps people took and the judgment calls they made along the way.1
It states no minimum headcount, and its form lists industries from accounting, construction and legal work to logistics, manufacturing and software.4
How does it work?
From estimate to transfer
You start with a short estimate, then fill in a form about your systems and files. Grepped replies with what is in scope and an offer, you sign an agreement that sets the scope, data use, retention and payment, and only then does it connect read-only to the sources you approved. It says no ongoing work is needed from your team.5,7
What is it worth?
Treat the first estimate as a starting point
Grepped's estimate uses only your team size, years in business and revenue, and its site says the final amount depends on your data sources, volume, quality and access terms. A comment in its own site code, dated October 14, calls the estimator "deliberately optimistic, above all for 100+ people". The written offer after review is the number to weigh.8,6
Will clients' names go out?
How Grepped handles your data
Access is read-only, limited to the sources you approve, and you can leave out any system, folder or record type. Grepped removes names, email addresses and phone numbers before anything leaves processing, deletes the original copies once processing is done, and writes how long it keeps the processed data into your agreement. It says plainly that no way of stripping out personal details is perfect, so leave out anything you cannot risk sharing.7
It also asks you to share only data you have the right to share, because some customer and supplier contracts limit how data can be used. The data goes to AI labs and research teams for training, and Grepped says it is not published or sold to your competitors.9,2
Before you sign
What to ask Grepped
Next step
Who Grepped suits
Grepped suits a business of any size that wants tight control: you pick exactly which systems go in, access stays read-only, and the original copies are deleted once processing is done. If that is how you want to do it, our match introduces you to Grepped and the other buyers we work with that take a company like yours, so you can read Grepped's written offer next to another.4,7
Check first
How to check Grepped, or any buyer
The same checks for every company we profile. We state facts; you decide.
- 1.Find the company behind the ad: a legal name, a registered address and named people.
- 2.Ask for a written offer and a sample agreement before you send any data.
- 3.Ask who removes personal data, by what method, and approve it before anything is exported.
- 4.Ask which AI labs will receive the data, and whether you will be told.
- 5.Ask how they are paid: by you, by the buyer, or from a share of your deal.
- 6.Get terms from at least one other buyer before you answer.
FAQ
Questions, answered with sources
Messages, code, documents, business records and task histories from tools such as Slack, Gmail, GitHub, Google Drive, Salesforce, QuickBooks and Zendesk.1
It connects read-only to the sources you approve, strips out names and contact details during processing, and deletes the originals afterwards.7
AI labs and research teams, for training models. Grepped says it is not published or sold to your competitors.2
Every business is different, so this one is best talked through with the buyer you're working with. Their team goes over it with you before anything is signed.
Before you sign
Questions to talk through with your buyer
Every business is different, so these are best talked through with the buyer you're working with. Their team goes over them with you before anything is signed.
Questions for this kind of business
- Is the license exclusive, and how long do you keep the processed copy?
- How do CCPA, GDPR, UK GDPR and state privacy laws apply, and is de-identified data still personal information?
- Do customer, vendor or platform contracts, NDAs or API terms restrict this?
Questions for any buyer
- Is the license exclusive, and for how long?
- Can you sublicense the data, and to whom?
- Which AI labs will receive it, and will you tell us?
- How long do you keep it, and how is it deleted?
- What is your liability cap, and who indemnifies whom?
- Will the contract ban re-identification of people in the data?
- Who removes personal data, by what method, and do we approve it first?