Legal

Sub-processor List

Last updated:

Nodes-IP uses the following third-party sub-processors to provide our platform. Customers are notified by email at least 30 days before a sub-processor is added or replaced, and can object under the Data Processing Agreement.

Application data and hosting

Involves invention disclosures

Everything stored in your account: projects, claims, application text, sources, and conversation history live in our database; uploaded figures and drawings live in file storage.

Railway

EU
Purpose
Application and Postgres database hosting
Data categories
All service data

Cloudflare R2

EU
Purpose
Figure/drawing storage
Data categories
User-uploaded images

AI processing

Involves invention disclosures

The AI assistant and the AI-backed drafting features: assistant conversations, claims drafting, application section composition, drawing descriptions, and figure generation. Prompts sent for processing can include your invention content and project text.

Anthropic

US
Purpose
LLM inference
Data categories
User prompts, generated content

Under Anthropic's commercial terms, data submitted through the API is not used to train Anthropic's models.

Tavily

US
Purpose
Web search for the AI assistant
Data categories
Search queries

OpenAI

US
Purpose
LLM inference when you choose a GPT model, and figure generation and editing
Data categories
User prompts, generated content, figures sent for editing

Under OpenAI's API terms, data submitted through the API is not used to train OpenAI's models by default.

Patent search queries

Involves invention disclosures

The prior art search area, and patent lookups made on your behalf by the AI assistant. Search terms and the numbers of patents you view are sent to these providers to retrieve patent data.

EPO (OPS)

EU
Purpose
Patent data lookup
Data categories
Search queries, patent numbers

Google Cloud (BigQuery)

US
Purpose
Patent claims lookup for non-EP patents
Data categories
Patent numbers

Account and authentication

Signing in and account management. An OAuth provider is involved only when you choose to sign in with it; Resend delivers the sign-in email when you use email sign-in.

Google (OAuth)

US
Purpose
OAuth sign-in provider
Data categories
Email, profile basics

Microsoft

US
Purpose
OAuth sign-in provider (Entra ID)
Data categories
Email, profile basics

Resend

US
Purpose
Transactional email (sign-in codes)
Data categories
Email address

Changes to this list

Added OpenAI.
Removed Termly.
Changed Resend (purpose).
List published with 10 sub-processors.