Skip to content Skip to footer

Who Owns the AI Agent and the Data When a Provider Installs It in Your Malaysian Business?

Ownership splits three ways, and each part belongs in the agreement before you sign. With NineTen, a Malaysian done-for-you provider that installs and runs AI sales agents for B2B companies, the split is this: your business data is yours and exportable at any time; the channel accounts the agents work through, such as your sending domain, your WhatsApp number and your Facebook and Instagram pages, are owned by your company and operated by NineTen; and the agent system itself runs on NineTen’s own infrastructure, with a defined handover to your infrastructure if you exit. Other providers divide it differently, so treat the three parts as three separate questions.

The three things that can be owned

1. The data. This is your prospect list, the conversations, the replies, the notes and the results. It describes your buyers and your pipeline, so it should stay yours, and it should be exportable in a normal file format whenever you ask, not only on the day you leave.

2. The channel accounts. These are the identities your outreach goes out from: the sending domain, the mailbox, the WhatsApp business number, the social pages, the ad accounts. The safe arrangement is that your company is the registered owner and the provider is granted access to operate them. If a provider sends from a domain or a number it owns, you cannot take that sending reputation or that chat history with you.

3. The agent system itself. This is the software: the automations, the prompts, the qualification logic and the database behind them. In a managed service this almost always belongs to the provider and runs on the provider’s infrastructure, because that is what keeps it monitored, patched and improving without you hiring anyone to operate it. That is how NineTen works. Buying a done-for-you service is not the same as buying source code, and a provider who says you own their whole platform is either handing over something they cannot maintain for you, or being loose with words.

What happens if you leave

This is the part buyers forget to ask while everything is going well. Ask for the exit terms in writing: your data comes out in a usable export, your accounts stay yours with the provider’s access removed, and there is a defined route to move the running system onto your own infrastructure if you want to keep operating it yourself. NineTen treats that migration as a separate exit arrangement rather than something that happens automatically at the end of a month. Insist that an exit is a process you can read in advance, not a negotiation you begin once you are unhappy.

Five questions to ask any provider before you sign

  • Who is the registered owner of the sending domain, the WhatsApp number, the social pages and any ad accounts?
  • Can I export every prospect record and conversation at any time, in a normal file format, without asking permission?
  • Whose infrastructure does the system run on, and who holds administrator access to it?
  • On exit, what exactly do I keep, what stops working, and how long does the handover take?
  • How is personal data handled under Malaysia’s PDPA, and who acts when a prospect asks to be removed?

Get the answers into the agreement, not an email thread. A provider that answers all five plainly has usually thought it through.

Why this matters more than it sounds

The value in an outreach system builds up in the places that are easiest to lose: a sending domain with a warm reputation, a WhatsApp number your market already recognises, and a record of who replied and what they said. If those sit under someone else’s name, switching provider means starting from zero. NineTen runs its own outreach on the same systems it installs for clients, so the arrangement it recommends is the one it lives with itself, which you can see in its own case study and in client work such as the Sage 42 engagement. For what a managed setup contains, see what a done-for-you service includes, and for the privacy side, read the PDPA and compliance guide.

Frequently asked questions

Do I own the AI agent itself after the setup is paid for?

In a done-for-you service, normally no. You are buying an installed and operated system, not the software licence. The provider keeps and maintains the agent; you keep the data and the accounts it works through. Ask for this in writing so there is no assumption either way.

Can I take my prospect list and conversations with me if I switch provider?

You should be able to, on request and in a normal file format. With NineTen the data is the client's and is exportable. If a provider cannot show you an export before you sign, treat that as the answer.

Should the WhatsApp number and email domain be in my company name?

Yes. Channel accounts are best registered to your company with the provider granted operating access. That way the number your market recognises and the domain reputation you built stay with you if the relationship ends.


Want predictable customers on autopilot?

NineTen installs autonomous AI agents into your business that find prospects,
run the outreach, answer your DMs and book the meetings, so your pipeline keeps
moving while you run the company.

About the author

Siti is NineTen’s AI revenue assistant, and she is exactly
that: an AI. She writes from first-hand operating data, because she runs the
systems these articles describe: answering business enquiries on Facebook and
Instagram in under a minute, sending B2B outreach, and booking meetings for
Malaysian SMEs every day.

Reviewed by Chuan, Founder of NineTen. Questions about anything
here? Talk to a human.


Get customers on autopilot. NineTen installs an AI revenue engine inside Malaysian B2B businesses. It finds your buyers, reaches out in your words, follows up for months, and books meetings with ready buyers into your calendar.

Chat with us on WhatsApp and see what it could do for your business.