Any "data" company must have full chain-of-custody for each one of their data points (where did we get it, how did we clean it, how would we update it, what was it previously, what has changed since X time, etc).

Otherwise they're just making accusations without any defense from repudiation.