ENTERPRISE SECURITY

Your IP Never Trains AI

Enterprise-grade infrastructure with provider-backed no-training commitments. Your patent data remains yours—isolated, encrypted, and never used for model training.

256-bit encryption
Enterprise-grade infrastructure
No shared intelligence

AI No-Training Commitment

The commercial API terms of OpenAI, Anthropic, and Google exclude training on data submitted through their APIs.

Complete Data Isolation

Multi-tenant architecture with encrypted data separation. No cross-customer access possible.

Enterprise-Grade Infrastructure

Built on Google Cloud, MongoDB Atlas, and Auth0—inheriting their security certifications.

Compliance & Certifications

Meeting enterprise requirements through world-class infrastructure and security practices

Infrastructure Provider Certifications

Built on the same infrastructure trusted by Fortune 500 companies worldwide

Google Cloud

  • SOC 2 Type II
  • ISO 27001/27017/27018
  • HIPAA Compliant
  • PCI DSS Level 1

MongoDB Atlas

  • SOC 2 Type II
  • ISO 27001
  • HIPAA Ready
  • GDPR Compliant

Auth0

  • SOC 2 Type II
  • ISO 27001/27018
  • CSA STAR Level 1
  • EU-US Data Privacy Framework

AI Providers

  • OpenAI, Anthropic, Google
  • No personal data sent
  • No training on your data
  • Zero retention available on demand
  • Standard commercial API terms

Data Protection Rights

  • GDPR Aligned

    Data subject rights honored on request: access, correction, deletion, and export

  • CCPA Ready

    California privacy rights with opt-out and deletion capabilities

  • Data Residency

    Hosted in US-CENTRAL1 (Iowa); alternative residency can be discussed for enterprise engagements

Documentation on Request

  • Security Overview

    Our security architecture and practices, prepared for client review

  • Subprocessor List

    Every third-party service that processes data on our behalf

  • Custom Security Addendum

    Discussed per enterprise engagement

Technical Architecture

Deep dive into our security implementation for your technical teams

Infrastructure & Backup

Automated Security (24/7)

  • Infrastructure: Google Cloud security management
  • Backups: MongoDB Atlas every 6 hours
  • Encryption: TLS 1.3 transit, AES-256 at rest
  • Protection: DDoS defense via Google Cloud edge

Service Characteristics

  • Retention: 35-day backups with 72hr PITR
  • Response: 2-4 business hours for incidents
  • Availability: Built on infrastructure carrying provider SLAs (Google Cloud Run 99.95%; MongoDB Atlas per its published SLA). A committed Adhyana SLA with service credits is available in enterprise agreements.
  • Location: US-CENTRAL1 (Iowa) residency

Infrastructure Operations

Patching: Managed serverless platform
Backups: Continuous, 6-hour snapshots
Isolation: Per-customer data isolation

Enterprise Security Questions

Transparent answers to your data protection and confidentiality concerns

Privacy & Confidentiality

Will our competitors know what we're researching?

No. Your competitive intelligence remains completely invisible to other customers.

  • •
    Technical Isolation:Each customer's data lives in segregated database spaces with no cross-access
  • •
    No Shared Intelligence:We never create industry reports, trend analyses, or insights using customer data
  • •
    No Aggregate Use:Customer data is never combined into cross-customer insights, trend products, or industry reports
  • •
    Access Control:Only you and your authorized team members can access your patent research

Your innovation strategy stays confidential. Period.

Can your employees see our searches?
Here's exactly who can see your data and when:

During pilot programs (15-30 days):
• Yes - The founder personally analyzes your queries to create custom intelligence reports
• This hands-on approach ensures quality and helps us understand your specific needs
• All work is done under strict NDA with deletion after pilot completion

Self-service platform (post-pilot):
• No - Automated analysis runs without human review of your searches
• Exception: Only if you request support or report an issue
• All platform queries are processed by AI without human oversight

Our commitment as we scale:
• Any future analysts will be bound by comprehensive NDAs and trained in IP confidentiality
• We'll always be transparent about when human review is required
• Long-term goal: Full automation with human expertise available only on request

Note: Many clients prefer the pilot phase precisely because of the personal attention and customized insights that come from expert human analysis.
How do you protect our identity when using AI services?
Our approach to AI provider data protection:

For automated platform queries:
• We strip all identifying information before sending to AI providers
• Only patent text and technical queries are sent - no company names or context
• Each query is isolated to prevent pattern detection
• AI providers cannot connect queries back to your organization

For pilot/custom intelligence services:
• Human analysis requires context to deliver strategic insights
• All work is done under strict confidentiality agreements
• Data is deleted after pilot completion

Our long-term goal is full anonymization for all services while maintaining intelligence quality.

AI & Data Usage

Can our patent searches train AI models?
No. Your data is protected through our careful AI provider selection and configuration:
• No-Training APIs: We use enterprise APIs configured to exclude data from training
• Provider Policies: Our AI providers have public commitments against training on API data:
  - OpenAI: API data usage policy
  - Anthropic Claude: Data training policy
  - Google Vertex AI: Data governance policy
• Data Retention: Standard API retention is 30 days for security monitoring
• Zero Retention Available: We can implement zero data retention agreements with providers for enhanced confidentiality

Integration & Deployment

Can we integrate with our existing IP management systems?
Yes, we're designed to complement your existing IP management tools:
• Today: Per-report exports (PDF) and data exports prepared and delivered on request (CSV/JSON)
• On the roadmap: Self-service workspace export and API access
• Single Sign-On: Your existing corporate authentication can work with Adhyana
• Your Control: You decide what data to share and when

CSV/JSON exports import cleanly into major IP management systems and custom databases. We'll collaborate with your IT team to ensure smooth data flow.
Can we deploy Adhyana on-premises?
Not today — Adhyana is a cloud-hosted platform and we have not shipped an on-premises deployment.

Why the core stays cloud-based:
• 170M+ patent record database: Too large for on-premises deployment (multiple TB)
• AI processing: Depends on hosted frontier models from OpenAI, Anthropic, and Google
• Patent data updates: Continuous synchronization with global patent office sources

For enterprise engagements we're open to discussing hybrid patterns — for example, keeping your proprietary documents in your environment and sending only patent identifiers and anonymized technical queries to our cloud. These are custom engagements scoped together with your security team, not an off-the-shelf offering.

Data Lifecycle

What happens to our data when we terminate?
We ensure orderly data handling based on service type:

For pilot programs:
• All data deleted within 7 days of pilot completion
• Data export prepared and delivered on request (CSV/JSON) during the pilot period
• No long-term retention unless you continue to platform

For platform subscriptions:
• 30-day grace period after termination — request your data and we deliver it in standard formats (CSV/JSON)
• Data removed from production within 7 days of request
• Backups expire within 35-day cycle
• Written confirmation provided upon complete deletion

Note: Technical logs (without patent content) may be retained for security monitoring.

Still Have Security Questions?

Send us your security questionnaire—72 hour turnaround guaranteed.

We're building Adhyana with security as a foundation, not an afterthought. Your intellectual property deserves the same protection whether you're our 1st customer or our 1000th.