Inklaim Security and data
Security and data
With Inklaim, the application, database, uploaded files and backups are in the European Union, on every plan. AI is optional, uses Google Cloud with processing in the EU and does not draw geometry. Each firm is isolated from the others and can export or delete its own data; Inklaim processes matter data as a data processor under Art. 28 GDPR.
Updated October 2026
Where the data is
The application, database, uploaded files and backups stay in the European Union, on every plan, from the free trial to Enterprise. Traffic between the browser and the server goes through a content delivery and protection network (CDN), which routes it and shields it from attacks and abuse without storing the content of matters. Artificial intelligence is a switch for each firm: if it is off, no content goes to the AI provider; if it is on, requests go to Google Cloud with processing in the EU.
Inklaim is web software from an Italian start-up founded in Turin that prepares draft patent drawings, checked against EPO, UIBM, USPTO, PCT, CNIPA and KIPO rules, from 3D CAD models (STEP/IGES), DXF or vector PDF files, photos of an object, sketches and claims.
| What | Where | When |
|---|---|---|
| Application and database | European Union | always, on all plans |
| Uploaded files (STEP, IGES, DXF, PDF, Word) | European Union | always, with size and type limits |
| Backups | European Union | always |
| Traffic between browser and server | content delivery and protection network (CDN), at the data centre nearest to the person connecting | always, encrypted over HTTPS; the content of matters is not stored |
| AI requests | Google Cloud, processing in the EU | only if the firm switches AI on |
| Own installation | your organization’s servers | on the Enterprise plan, by agreement |
The content delivery network is based in the United States: the data transfer is based on the adequacy decision for the EU-U.S. Data Privacy Framework and on the standard contractual clauses, as explained in the platform’s privacy notice. Your plan doesn’t change where data is stored: the same infrastructure applies to the €49 per-matter plan and to firms with many seats. See the pricing of all plans.
Artificial intelligence
The lines on the drawing sheets come from your files: CAD views, DXF and PDF import and line drawing are deterministic. AI works on texts and makes proposals; the draftsperson and the patent attorney decide.
The firm switches AI on or off for everyone with a single switch. Inklaim also works without it, flowcharts and block diagrams included.
Each firm has a monthly limit of AI requests and sees how much it has used. No surprises at the end of the month.
Google states that it does not use customer data to train or fine-tune AI models without their permission. Google’s certifications belong to Google, not to Inklaim.
Access and isolation
No. One firm’s data is never visible to another, down to the database, thanks to row-level security rules.
Files and logs
A STEP model contains the whole invention. That is why files are handled under strict rules, from upload to logs.
Uploaded files with size and type limits, over HTTPS connections only.
CAD models and 2D drawings are processed in separate processes, with time and memory limits.
No texts or drawings of your matters end up in error logs.
Traceability
Every figure has its own version history, with author, date, preview and restore. The activity log keeps track of the work in the firm.
When the patent attorney reviews a drawing sheet before filing, they open earlier versions in preview and, if needed, restore one.
GDPR and confidentiality
Your firm is the controller of the matter data; Inklaim processes it on your behalf.
Inklaim processes matter data as a data processor on behalf of the firm, under the agreement required by Art. 28 GDPR.
You can export all of the firm’s data and delete the entire firm or a single account.
The pilot starts from matters already filed and published. Unpublished matters come in only after a written agreement.
How we process the personal data of Inklaim users and website visitors is explained in the privacy policy.
For large organizations
With the Enterprise plan, by agreement, you add three options to everything described above.
Sign-in with the company account, managed where IT already manages user accounts.
Inklaim installed in your infrastructure: CAD files stay in-house.
AI requests go to the service your company has already approved.
FAQ
In the European Union, on all plans: application, database, uploaded files and backups. With Enterprise you can also install Inklaim on your organization’s servers.
Inklaim uses Google Cloud as its AI provider; Google states that it does not use customer data to train or fine-tune models without their permission. With AI switched off, no content goes to the AI provider.
Yes. AI is a switch for each firm. CAD views, DXF and PDF import, checks, numbering and flowcharts also work with AI switched off.
It is flagged in the app and in the metadata of exported files, as required by Art. 50 of the EU AI Act. Nothing visible appears on the sheet.
You can export all of the firm’s data and then delete the entire firm, or delete a single account.
No, Inklaim does not claim any certifications of its own. This page lists the measures we apply. Google Cloud’s certifications concern Google, not Inklaim.
More answers in the Inklaim FAQ.
The pilot
The 4-week pilot uses 3 matters already filed and published, after a non-disclosure agreement has been signed. 3–6 people from your firm, with time and quality compared together.