AcePatent
Draft for legal review. Text marked [COUNSEL] must be completed or confirmed by a lawyer before launch. Version 2026-10-21.

Data processing agreement

For organisations that use AcePatent to process their inventors' and employees' personal data. [COUNSEL: adapt to GDPR Art. 28 / PIPEDA and the customer's procurement requirements.]

Roles

The organisation is the controller of the personal data in its account; AcePatent is its processor.

Processing

  • Subject matter: preparing, researching and managing patent applications.
  • Data subjects: inventors, the organisation's users, practitioners.
  • Categories: names, contact details, residence and citizenship (for filing forms), invention information.

Subprocessors

[COUNSEL: hosting provider, AI provider, payment processor, email provider, patent search providers; notice period for changes.]

Security measures

  • Tenant isolation in the application and per-job isolated AI workspaces.
  • Encryption in transit; access controls by role; audit log of actions.
  • Backups encrypted and stored off-site; tested restores.

Deletion and return

On termination the organisation can export its data; AcePatent deletes it within [COUNSEL] days.