← Back
Data Security
How we protect your invention descriptions
Your IP is confidential
We understand that invention descriptions submitted to PatentNexus are confidential, pre-filing intellectual property. Protecting this information is our highest priority. We treat every submission as if it were our own trade secret.
Encryption
All data is encrypted in transit and at rest:
- — TLS 1.3 encryption on all connections (HTTPS enforced via HSTS)
- — Database encryption at rest (PostgreSQL, ClickHouse)
- — API keys are SHA-256 hashed before storage
- — Stripe handles all payment data (PCI DSS compliant)
How your invention descriptions are processed
When you submit an invention description, here is exactly what happens:
- Your description is sent to our API server over an encrypted connection.
- We use configured search and AI providers to perform the research operations you request and to organize evidence into your Workspace. Each Packet records the behavior and provenance that produced it.
- Your description is sent to these AI providers only for processing — it is not used to train their models. Anthropic and Google operate under data processing agreements that prohibit training on API inputs.
- Results are stored in your account and accessible only through authorized account access. Workspace content is excluded from product-improvement use unless you grant separate, revocable consent for that Workspace.
Data retention
Chat conversations and Evidence Workspace records are stored under their applicable retention rules. A Workspace deletion request revokes access immediately and schedules primary-data and recovery copy deletion within the periods shown at confirmation.
Access controls
- — Your data is only accessible to your authenticated account
- — Internal access is role-restricted and logged
- — We do not sell or share your invention descriptions with third parties
Contact
Security questions or disclosures: hello@patentnexus.net