InspireIP recently completed its SOC 2® examination.
What that means for your IP?
Menu
InspireIP Trust Center
At InspireIP, trust isn’t an add-on, it’s the foundation of our platform.
We believe Intellectual Property deserves more than storage, it deserves uncompromising protection. As a platform designed to simplify and accelerate IP operations, we place security, privacy, and compliance at the core of everything we build.
That’s why security, privacy, and compliance are woven into every layer of our product, from infrastructure to product design to internal operations.
With deep expertise in IP workflows and secure digital infrastructure, InspireIP ensures your disclosures, ideas, and sensitive documents remain safe, encrypted, and fully controlled. Our systems are engineered to meet the highest standards of data protection while delivering the speed and usability modern R&D, legal and innovation teams need.
Our mission is simple: empower organizations to collaborate, manage, and innovate with confidence – knowing their IP lifecycle is guarded by enterprise-grade security, transparent policies, and reliable compliance measures.
Founded in 2020
Compliances (4)
SOC 2
ISO 27001
ISO 9001
VAPT Security Tested
Controls
- Product security (1)
- Production System User Review
- Data security (9)
- Identity Validation
- Termination of Employment
- Production Databases Access Restriction
- Network security (8)
- Impact analysis
- Limit Network Connections
- External System Connections
- App security (4)
- Conspicuous Link To Privacy Notice
- Secure system modification
- Approval of Changes
- Endpoint security (5)
- Malicious Code Protection (Anti-Malware)
- Full Device or Container-based Encryption
- Endpoint Security Validation
- Corporate security (27)
- Roles & Responsibilities
- Organizational Structure
- Code of Business Conduct
Subprocessors (10)
GitLab
Development software
AWS
IT infrastructure
New relic
Development software
HubSpot
Sales
Teleport
IT Management
Sentry
Analytics
PQAI
Patent Tool
Resources (37)
System Acquisition and Development Lifecycle Policy
System Acquisition & Development Lifecycle Policy outlines guidelines to ensure that software development and acquisition related activities adhere to integrated information security considerations throughout the lifecycle.
Compliance Procedure
Compliance Procedure outlines methods for managing regulatory and legal compliance requirements within the scope of the Information Security Management System (ISMS)
Asset Management Policy
Asset Management policy outlines guidelines for the classification, protection, and responsible handling of company assets at all stages of their lifecycle.
System Description
Pentest Report
FAQs
How does InspireIP leverage AI within the product?
InspireIP uses AI and machine learning to enhance search, discovery, and analysis across patents, scientific papers, and market data. This allows our users to find connections faster, uncover insights across domains, and make better innovation decisions.
At the same time, we place a strong emphasis on privacy and trust. InspireIP's AI models are not trained on customer data. This means your proprietary data remains private, secure, and never used to improve our algorithms. Our systems are designed so that you get the power of AI without compromising data confidentiality.
Does InspireIP encrypt data at rest?
All datastores with customer data, in addition to S3 buckets, are encrypted at rest. Sensitive collections and tables also use row-level encryption.
This means the data is encrypted even before it hits the database so that neither physical access, nor logical access to the database, is enough to read the most sensitive information.
How does InspireIP encrypt data in-transit?
InspireIP uses TLS 1.2 or higher everywhere data is transmitted over potentially insecure networks. We also use features such as HSTS (HTTP Strict Transport Security) to maximize the security of our data in transit. Server TLS keys and certificates are managed by AWS.
Where can I find InspireIP's Responsible Disclosure Policy?
InspireIP's Responsible Disclosure Policy can be found here: Responsible Disclosure Policy.
How do you monitor for security breaches?
Automated monitoring is enabled that include alerts to security personnel based on certain rules/thresholds.
In addition to the daily oversight, ongoing vulnerability assessments, and use of alerts provides further security monitoring through the security function, which performs periodic audits and information security assessments.
Powered by
