Security
Invention disclosures, unfiled patent claims, and litigation work product demand institutional data governance. AutoPat delivers an isolated research environment backed by contractual zero-retention commitments and strict regional boundaries.
Customer disclosures, claim sets, and generated deliverables are strictly excluded from model training. Our agreements with all infrastructure and model providers contractually prohibit the use of customer inputs or outputs for model training or fine-tuning.
AES-256 encryption at rest, TLS 1.3 in transit. Search execution runs on private, tenant-isolated compute environments rather than public endpoints. Secrets are managed in Google Cloud Secret Manager with strict organizational isolation enforced on every request.
Complete geographic data isolation with dedicated US and EU Google Cloud projects. Customer content, indices, and model inference remain strictly within the chosen jurisdiction to ensure compliance with regional data governance requirements.
Role-based access controls (RBAC), multi-factor authentication, and granular matter-sharing permissions. Vendor support access is strictly time-bounded, audit-logged, and subject to customer approval. Standard DPAs and SOC-aligned controls are provided for all enterprise deployments.
We provide comprehensive legal protections for enterprise customers, including dedicated Data Processing Agreements (DPAs) and EU Standard Contractual Clauses (SCCs). Our compliance team routinely completes enterprise vendor risk assessments, CAIQ/SIG questionnaires, and custom security evaluations as part of standard procurement.
Request security documentation