Skip to content
EnaTTO
Documents & confidentiality

Confidential invention information, open only to those who need it

Every record and document in EnaTTO carries one of four confidentiality classes; who sees what is decided on the server from a person’s role and their function on the record. Documents are stored as immutable versions, and opening confidential records and downloads are written to the audit log.

Request a demo Talk to us

Four confidentiality classes

Public, internal, confidential and strictly confidential. Invention disclosures start as confidential.

Versioned documents

Every upload is a new, immutable version; its size and SHA-256 hash are stored with it.

Record-level access

Inventors, responsible specialists, reviewers, attorneys and committee members see what their relation allows.

Time-limited external access

External experts and patent attorneys get access for a set period; it closes on the server when it ends.

Justified access

Non-members open a strictly confidential record only with a reason; access is audited and the people responsible are notified.

Append-only audit log

Changes, confidential record views and downloads are logged; personal data is masked in the log.

Confidentiality classes

Anyone who can read the directory sees the title and summary of public records. Internal records are open to TTO staff. Confidential records are seen by staff with the relevant permission, and every view is audited. Strictly confidential records are seen only by members of the record; anyone else, the owner included, opens them with a written reason, and the people responsible for the record are notified.

  • Public
  • Internal
  • Confidential (default for invention disclosures)
  • Strictly confidential

Roles and record relations

Permissions have two layers. Your organisation role (owner, system administrator, TTO staff, member, institutional viewer) opens a type of action; your relation to a record (owner, inventor, team member, responsible, reviewer, external expert, patent attorney, committee member, viewer) decides on which record it applies.

System administrators manage users and settings without automatic access to business records. Institutional viewers see aggregate reports only, never record details.

Records you may not see do not exist for you

A record you are not allowed to see does not open and does not appear in lists; even a typed address returns “not found”, so its existence is not revealed. External users do not see internal notes, other reviews or the reasoning of the institutional decision.

Audit log

Every change is written to the audit log. Views of confidential and strictly confidential records and document downloads are logged as well. The audit log is append-only in the database: updates and deletions are rejected. Names and e-mail addresses are masked in the log.

Related pages

Frequently asked questions

Does the organisation owner see every confidential record?
The owner sees confidential records, and every view is audited. For strictly confidential records, an owner who is not a member opens access with a written reason, and the people responsible are notified.
Can document versions be deleted?
Versions are immutable. A new file is added as a new version; records are archived, and permanent deletion happens only through the retention process.
What does a patent attorney see?
Only the applications they are assigned to and their documents, for the period of the assignment. Internal notes and other reviews stay hidden.
Do notification e-mails contain confidential content?
No. Notifications arrive in the app and by e-mail; their text contains only a record code and a link, never confidential content.

Let's talk about your technology transfer office

We'll show what EnaTTO does today and look at your disclosure, IP, industry and startup processes together.

Request a demo 0850 308 45 91

A separate environment for every organisation · Turkish, English and German