iphere handles confidential subject matter — patent, trademark, and design filings. This document addresses how your invention and technical information is protected, and answers the two questions we hear most often: (1) Could using AI leak my technology? and (2) What if the database is breached?
This policy operates alongside our Terms of Service and Privacy Policy. It only states protections we technically and operationally enforce.
Effective date: 2026-06-07
iphere's AI Specification Assistant and prior-art analysis features call a commercial AI infrastructure that holds international security certifications, invoked from our backend only. We do not route your inputs through public consumer chatbot services.
iphere applies a defense-in-depth model.
auth.uid() = user_id). Reading another user's filings, documents, or payment history is blocked at the SQL level.service_role) is used only on our server and is never included in any client (browser/mobile) bundle. This is enforced as a non-negotiable code rule.In practice, most patent work today is conducted over ordinary email (consumer webmail, corporate mail) and messaging apps (KakaoTalk, Slack, etc.). The protection model iphere applies differs from those channels in the following ways:
| Aspect | Ordinary email / messaging | iphere |
|---|---|---|
| Data isolation | Message body stored on the mail server. Exposed at sender, recipient, and every intermediate hop. | Per-user Row-Level Security. Cross-user reads blocked at the SQL level. |
| Encryption at rest | Varies by provider; some store close to plaintext. | AES-256 enforced. |
| Access separation | Internal staff and administrators commonly have access to message bodies. | service_role is segregated; day-to-day operators cannot bulk-read message bodies. |
| Compliance certifications | Varies widely by provider. | Infrastructure with SOC 2 Type 2 / ISO 27001 / HIPAA certifications. |
| Audit trail | Often limited to message send/receive logs. | Migration and access logs retained separately. |
In other words, compared with patent work that is already routinely conducted over ordinary email and messaging — which is the current real-world baseline — iphere applies a materially higher standard of protection.
That said, no digital service can promise 100% elimination of risk. The only way to fully avoid digital exposure is to keep invention materials entirely on paper, handle them face-to-face, and exchange them only by physical mail. That approach severely undermines the speed, accuracy, and reviewability of actual filing work, and is effectively impractical in modern patent practice. iphere is designed to apply the highest level of security achievable in a digital environment while still enabling efficient and reliable filing work.
iphere's filing work is performed by patent attorneys at Lidam Patent & Law Firm. Patent attorneys in Korea bear the following legal obligation:
To deliver the service reliably, iphere entrusts certain processing tasks to external providers. Each provider is bound by an equivalent level of security and privacy obligation. The complete list of processors is set out in the Privacy Policy.
| Scope | Notes |
|---|---|
| AI model inference | Commercial AI infrastructure with international security certifications. No training by default. |
| Database, authentication, storage | SOC 2 Type 2 / ISO 27001 / HIPAA |
| Web hosting and SSR | SOC 2 Type 2 |
| CDN and DDoS protection | SOC 2 Type 2 / ISO 27001 |
| Domestic payment processing (Korea) | PCI DSS (standard for Korean PGs) |
| Transactional email delivery | Outbound notifications only |
You may exercise the following rights regarding your data:
If you discover a security vulnerability in iphere, please report it to the following address. We will review the report promptly and protect the reporter's identity.
We will provide notice (in-product or by email) at least 7 days before the effective date of any change (30 days for material changes). Continued use of the service after the effective date constitutes acceptance of the revised policy.
Contact: security@ip-here.com
Effective date: 2026-06-07