Skip to content

Reference

Security, data and compliance in Patent & Trademark Examination Workflow

Security controls, supported requirements, hosting and limitations of Patent & Trademark Examination Workflow.

Applies to Patent & Trademark Examination Workflow as it works today. Moraph updates the platform continuously, and this page is reviewed when it changes.

Last reviewed 2 min readReport a problem
On this page
  1. Security controls
  2. Confidential applications
  3. No AI models
  4. United States hosting
  5. Encryption and keys
  6. Complete audit trail
  7. Tested releases
  8. Requirements it supports
  9. Where it runs
  10. Limitations

How Patent & Trademark Examination Workflow protects data and supports your compliance obligations.

Security controls

Confidential applications

Unpublished application content is visible only to its assigned examiner, the people on its examination team and product administrators (supervisory examiners), supporting the confidentiality the law requires.

No AI models

The product doesn't use AI, so application content and examiner decisions are never used to train models.

United States hosting

Data is hosted on Cloudflare's network, in a database that is not restricted to a jurisdiction.

Encryption and keys

Client data is encrypted.

Complete audit trail

Every record change, relevance decision, export and opening of the printable examination record is logged with the person and time, and cannot be edited.

Tested releases

Every release passes security testing gates before it ships, and a software bill of materials is maintained for the product.

Requirements it supports

  • 35 U.S.C. 102 (novelty) and 35 U.S.C. 103 (obviousness)
  • 35 U.S.C. 122 (confidential status of applications)
  • Rules of practice in patent cases (37 CFR Part 1)
  • Manual of Patent Examining Procedure (MPEP)
  • Trademark Act of 1946 (Lanham Act, 15 U.S.C. 1051 et seq.)
  • Trademark Manual of Examining Procedure (TMEP)

The product supports these requirements; meeting them remains your organization's responsibility.

Where it runs

  • Moraph cloud: Hosted and operated by Moraph on Cloudflare's network.
  • With a managed service: Optionally run alongside a Moraph managed service for administration, source updates and integration support.

Limitations

  • It does not decide patentability or registrability. Examiners decide what is relevant and make every determination, and the office's procedures apply.
  • It doesn't search for prior art or conflicting marks. Examiners search in their own tools, or your office's search tool sends its results through the Work API.
  • It doesn't connect to any patent, literature or trademark database; the search sources register records what examiners search and when each source was last updated.
  • It doesn't translate. A document in another language is relied on only once the examiner records that its passages were checked against the original or an official translation.
  • It doesn't issue office actions or send anything to applicants; actions drafted from templates are recorded as issued once your case system has issued them.
  • Moraph holds no FedRAMP authorization for this product. We provide control documentation to support your office's own authorization decision.
  • It is not designed for classified information, including applications under secrecy orders, which must be handled outside it.
  • It doesn't rank results or decide whether marks are similar; the spelling and sound codes are aids, and a search tool's rank is shown only as a suggestion.
Note

Company-wide controls, data residency and subprocessors are described in the Moraph Trust Center, where you can request the evidence pack.

Was this page helpful?

Report a problem with this page
What’s the problem?
Quote the step or heading if you can. Don’t include passwords or personal records.
Only if you’d like a reply. We use it for this report and nothing else.

Need help with your own setup rather than this page? Raise a support ticket.