Confidentiality and access
EnaTTO's four confidentiality classes, who sees confidential records, justified and time-limited access, and what never leaves EnaTTO.
- EnaTTO app
This article was verified with an older release. Screen names or steps may differ in the current version.
Technology transfer handles unpublished inventions and companies' business information. EnaTTO protects them with confidentiality classes, record-level roles and an audit trail, and keeps confidential content away from exports, emails and external services.
The four classes
Four confidentiality classes
Public
Internal
Confidential
Strictly confidential
Access narrows from left to right.
| Class | Who sees it |
|---|---|
| Public | Staff with the module permission; people who can view the directory see its title and summary |
| Internal | Staff with the module permission and the record's members |
| Confidential | The record's members and staff with the module permission; every opening is audited |
| Strictly confidential | Only the record's members. Nobody sees it automatically, including an owner |
Invention disclosures are created as Confidential. Industry demands are visible only to industry managers.
Justified access to strictly confidential documents
A manager who is not a member of a strictly confidential document sees Strictly confidential document instead of its content. To open it, they enter a Reason (at least 10 characters) and click Open access. This gives 30-day view access, is written to the audit log, and the people responsible for the document are notified.
Time-limited access for external people
External experts (assessors) and patent attorneys need an end date on their record access. When it passes, access closes automatically on the server and the expiry is written to the audit log. External users never see internal notes, other assessments or the rationale of institutional decisions.
What stays inside EnaTTO
- Not found instead of forbidden: a record you may not see is shown as not found, so its existence is not revealed.
- Reports count confidential records in totals but never list their titles or people.
- Exports keep confidential and strictly confidential rows with their code and status only. Internal notes and planned disclosures never appear in a file.
- Notifications and emails contain only the record code and a link.
- Planned disclosures of a confidential invention (publications, talks, theses) are not shown to external users and are not exported.
- External services (EPO, OpenAlex, Crossref, the AI gateway) never receive unpublished or confidential content. The EPO is asked only about published numbers; AI assistance refuses confidential and strictly confidential records. See AI assistance.
- The audit log masks names and emails.
Responsibility stays with your institution
EnaTTO is designed to support data protection and confidentiality obligations. Your institution remains responsible for its legal basis, its IP policy and its decisions on rights and ownership.
Related articles
Can't find what you need?
Our support team can help, from setting up workflows to reports. Please include your organisation code.
Document store
Keep policies, templates, contracts and reports in the EnaTTO document store with versions, confidentiality classes, access and an approval workflow.
Institutions, people and partners
The EnaTTO directory - your institution and its unit tree, the people you work with (with or without an account) and ecosystem partners.