Data Security & Retention

1. AI processing — OpenAI GPT-5.2 API

Gate IP uses OpenAI's API for invention analysis and document preparation. Our reported API configuration includes store: false, which disables persistent Responses API response storage, and organization-level API call logging is disabled. OpenAI does not use API customer inputs or outputs for model training by default.

Important distinction: These settings do not by themselves constitute OpenAI Zero Data Retention (ZDR) approval. OpenAI may separately retain content for abuse monitoring under its standard API policy. We do not claim approved provider-side ZDR unless confirmed for the relevant organization, endpoints and features.

Official reference: OpenAI API data controls ↗.

2. MCP integration

Gate IP uses a serverless Model Context Protocol (MCP) layer to supply tool instructions and routes to external patent-information APIs. The intended design does not use the MCP layer as a permanent invention repository.

3. Patent information — Espacenet / EPO

Patent-search requests are designed to share search expressions and technical keywords, not complete invention disclosure documents. Search queries can themselves reveal technical information, and the patent data provider's own handling rules apply.

4. Patent analytics — Ambercite

Ambercite requests are designed around seed patent publication identifiers rather than full confidential invention dossiers. Ambercite's hosting, data-handling and retention commitments are governed by its own applicable agreements and policies.

5. Workflow automation — Make

Gate IP uses Make to coordinate professional workflows. Workflow services may process invention-related content and can retain execution information unless appropriately configured. Gate IP aims to minimize transmitted payloads and to configure execution history and logging in accordance with the required confidentiality level.

6. IP management and document retention — Airtable

Gate IP uses Airtable as an IP management database for controlled invention records. Records are subject to platform security mechanisms and Gate IP's access management. The proposed normal retention schedule is 30 days after filing so customers can request a copy of their available dossier. After that period, records under Gate IP's direct control are scheduled for deletion, subject to legally required retention and underlying provider backup and recovery cycles.

Inventions that are not filed, including those stopped or handled through defensive publication, require a separately defined retention trigger.

7. Customer access and deletion requests

Customers may contact Gate IP to request an available copy of their invention records, ask about data handling or seek deletion, subject to applicable legal and technical limitations. Please use the contact form.

8. Independent audit — right to verify

Clients may request an independent verification of Gate IP's data-security, confidentiality and retention practices by a suitably qualified, independent information-security auditing firm, subject to an agreed scope, reasonable advance notice, confidentiality safeguards and protection of other customers' information.

The requesting client bears the audit costs, including any mutually agreed Gate IP support expenses. Audits cover Gate IP-controlled systems and evidence Gate IP may lawfully provide; this right does not grant direct access to the infrastructure of OpenAI, Ambercite, Make, Airtable or other third parties. The auditor and scope must be approved on reasonable security grounds.