Separate accounts
Each account is separated from the data of other accounts. The separation is enforced at database level, not only in the user interface.
AI and data protection
Handling confidential technical content responsibly.
This is a convenience translation. Only the German version is legally binding. Deutsche Fassung
A service invention is a trade secret of the employer. This page shows how ErfinderWerk handles such content, including where there are limits.
Status of the information on the language model: checked on September 11, 2026 against the provider's terms.
The path of your content.
- Your browserYou work in the application. No connection goes from your browser to the model provider.
- Servers in the EUApplication, database, file storage and backups run on Microsoft Azure in the European Union.
- Dedicated AI serviceEvery call runs through a dedicated service on our server. It first replaces names, company and contact details.
- Language modelOnly if you use AI functions: models from Anthropic, processing in the United States.
- Back to youThe response comes back through the same service, and replaced details are restored.
Schematic diagram of the data flow, not a product interface.
What is transmitted and what is not.
- Masked are names of inventors and editors, company names, email addresses, phone numbers, IBANs and credit card numbers.
- Transmitted is the technical teaching of the invention: features, effects and claims. Without it, the AI cannot work. This cannot be masked, and we do not claim otherwise.
- Images are not masked. An automatic replacement does not recognize a letterhead on a scanned lab notebook page. Images are still sent to the model; there, protection rests on the provider's contractual commitments.
- The application does not currently detect names on uploaded images and documents automatically. Therefore, do not upload documents that name third parties who have nothing to do with the invention.
Masking serves data minimization: names of third parties that are not needed for the AI task should not leave the house.
What the model provider guarantees by contract.
Checked on September 11, 2026 against Anthropic's Commercial Terms and documentation.
- No training on customer content. Verbatim: “Anthropic may not train models on Customer Content from Services.” This applies to text and to images. The application uses the API under the Commercial Terms, not the consumer terms of claude.ai.
- Deletion after 30 days. Inputs and outputs are automatically deleted by the provider within 30 days.
- Exception: If the provider's automated safety system flags a call, the provider may retain the affected inputs and outputs for up to two years and classification scores for up to seven years.
- Place of processing: United States. The legal basis for the transfer is the standard contractual clauses of the European Commission, part of the data processing agreement with the provider.
Access rules and encryption.
Stored encrypted
Uploaded files and backups are stored encrypted.
No access by us
We look into your content only at your request or if it is unavoidable to fix a fault. Such access is logged and disclosed on request.
No disclosure
No disclosure to third parties, except to the named processors for operation and AI. No use of your content for our own purposes, for examples or for further development.
Working without AI.
The AI functions can be switched off. Then no content leaves our systems. What keeps working: the Idea Space with building blocks, connections and files, the invention disclosure under § 5 ArbnErfG including export, the remuneration calculator, and deadlines, costs and handover packages.
For inventions with an increased need for protection, this is the recommended route.
Contracts and roles.
- If an individual uses the application for their own purposes, we are the controller for the account data and the processor for the content entered.
- If a company uses the application for its employees, the company is the controller and we are the processor. For this purpose, we provide a data processing agreement under Art. 28 GDPR including the list of sub-processors; request it at info@erfinder-werk.de.
- The confidentiality commitment applies without a signature; it remains in effect for five years after the end of use. We provide a signed copy on request.
- The privacy policy covers this website. Processing by language models is explained in the application's notices and in the data sheet, not there.
Outlook for Enterprise and universities Coming soon
For companies with Enterprise and for universities with a higher need for protection, dedicated AI endpoints, local models and operation in your own infrastructure are described as an outlook. They are not available in production. More on the page Enterprise.
- Splitting content by data class with a local processing ring is described as an architectural goal, but is not in operation.
- The checkpoint before the model is with us: names, company and contact details are replaced before a call leaves the server.
Further documents.
The data sheet is intended for the patent department, IT and data protection officers and can be passed on as a PDF.
We answer questions by email: info@erfinder-werk.de