Skip to main content
← Back

Data Security

How we protect your invention descriptions

Your IP is confidential

We understand that invention descriptions submitted to PatentNexus are confidential, pre-filing intellectual property. Protecting this information is our highest priority. We treat every submission as if it were our own trade secret.

Encryption

All data is encrypted in transit and at rest:

  • — TLS 1.3 encryption on all connections (HTTPS enforced via HSTS)
  • — Database encryption at rest (PostgreSQL, ClickHouse)
  • — API keys are SHA-256 hashed before storage
  • — Stripe handles all payment data (PCI DSS compliant)

How your invention descriptions are processed

When you submit an invention description, here is exactly what happens:

  1. Your description is sent to our API server over an encrypted connection.
  2. We use configured search and AI providers to perform the research operations you request and to organize evidence into your Workspace. Each Packet records the behavior and provenance that produced it.
  3. Your description is sent to these AI providers only for processing — it is not used to train their models. Anthropic and Google operate under data processing agreements that prohibit training on API inputs.
  4. Results are stored in your account and accessible only through authorized account access. Workspace content is excluded from product-improvement use unless you grant separate, revocable consent for that Workspace.

Data retention

Chat conversations and Evidence Workspace records are stored under their applicable retention rules. A Workspace deletion request revokes access immediately and schedules primary-data and recovery copy deletion within the periods shown at confirmation.

Access controls

  • — Your data is only accessible to your authenticated account
  • — Internal access is role-restricted and logged
  • — We do not sell or share your invention descriptions with third parties

Contact

Security questions or disclosures: hello@patentnexus.net