Trust & Security
Last updated: September 2026
Your invention is the most valuable thing you bring to EntreDash. This page exists so you know exactly how we handle it. Every claim below is independently verifiable on MindStudio's Trust Center.
The three things you need to know
- Your inputs are never used to train AI models. Not by us, not by any AI provider we route to. This is stated directly by our infrastructure provider and contractually enforced with every model in the catalog.
- Your data sits on SOC 2 Type II-audited infrastructure. We run on MindStudio, whose platform passes that audit annually through an independent third party. It's the same audit standard relied on by enterprise SaaS like Notion and Linear.
- You can delete everything at any time. Each idea, each memo, each strategy session, and your entire account — gone with one click in Settings.
Two layers of security
It helps to be precise about what is certified by whom. EntreDash runs entirely on MindStudio, an independently audited infrastructure platform. That means your data inherits a strong set of platform-level controls, and we add our own application and data-handling practices on top.
- The infrastructure layer (MindStudio). Holds a SOC 2 Type II attestation, the rigorous continuous-controls audit covering encryption, access management, change management, and incident response operating effectively over a multi-month period, verified annually by an independent third party. MindStudio is also GDPR compliant and offers a Data Processing Addendum for handling personal data. Audit reports and compliance certifications are available on request through their Trust Center.
- The application layer (EntreDash). Our own code, access controls, and the confidentiality commitments described on this page. EntreDash does not currently hold its own separate SOC 2 attestation; we rely on MindStudio's audited infrastructure and our own documented practices. If you are an institutional buyer who needs a vendor security review, reach out and we will work through it with you.
What we do — and don't do — with your data
| What happens with your invention details | Yes / No |
|---|---|
| Encrypted in transit (TLS) | Yes |
| Encrypted at rest | Yes |
| Access logged and monitored | Yes |
| Deletable on request | Yes |
| Used to train AI models | No |
| Sold or shared with third parties | No |
| Given to advertising or analytics tools | No |
| Published anywhere public | No |
| Available to other users / search engines | No |
One thing the table above doesn't cover: research. To check your invention against what already exists, EntreDash sends search terms drawn from it (short technical and category terms, not your full description) to public patent databases like Google Patents and the USPTO, to academic and literature indexes, and to web search, then reads what comes back. This is how the prior-art search and the market research in your memos stay backed by real, cited sources. Your invention itself is never posted, filed, published, or handed to anyone. Only the search terms needed to look it up ever leave the platform.
Where your data lives, and who processes it
Servers are based in the United States, hosted on Amazon Web Services. The platform's infrastructure subprocessors, published in full on the MindStudio Trust Center, include Amazon Web Services (US), Cloudflare (content delivery), Vercel (US), Zilliz (US), and Google Cloud Platform (US).
Because EntreDash uses AI to analyze your invention, your inputs are processed by the AI model providers we route to: primarily Anthropic (the Claude models), with OpenAI and Google models for specific functions. MindStudio's broader platform offers additional AI providers, but EntreDash does not route your invention data to them. Every provider we use operates under enterprise API terms that prohibit using your inputs to train their models, and your inputs are not retained beyond what is needed to return your result.
Active security practices
The following controls operate at the infrastructure layer, maintained and independently audited as part of MindStudio's SOC 2 program:
- Penetration testing — performed regularly by qualified third-party security firms.
- Disaster recovery plans tested — not just documented but actively exercised.
- Cybersecurity insurance maintained — financial backstop in the unlikely event of an incident.
- Encryption key access restricted — only authorized personnel can access encryption keys.
- Asset disposal procedures — secure data destruction at end-of-life for any hardware.
How EntreDash differs from ChatGPT or Claude
Several testers asked us this directly, so we want to answer it plainly. The short version: ChatGPT, Claude, and general AI chatbots are wonderful tools, but they were not built with invention confidentiality in mind.
| General AI chatbots | EntreDash | |
|---|---|---|
| Confidentiality contract | Consumer terms vary; inputs may be reviewed by humans | Explicit Confidentiality Terms accepted before any sensitive interaction |
| Used to train AI models | Sometimes opt-out, sometimes default-on | Never — confirmed by infrastructure provider |
| Patent-specific workflow | General-purpose conversation | Structured strategy session built with input from patent attorneys |
| Prior-art search | Hallucinates patent numbers | Live search of US patent databases |
| Structured deliverable | Free-form conversation | Invention strategy memo: verdict, prior art, filing path, next steps |
You're in control
Every piece of data you generate while using EntreDash is yours. In Settings → Privacy you can:
- Export everything you've created (ideas, memos, sessions) as a downloadable file
- Delete any individual idea — and every memo, session, and version tied to it
- Delete your entire account — and every piece of data attached to it
We do not keep "shadow copies" or backups beyond the standard infrastructure retention window required for disaster recovery. Deleted data is gone.
Frequently asked
Does using EntreDash count as "public disclosure" of my invention?
No. EntreDash operates as a confidential analysis tool, not a public forum. Specifically:
- Your inputs are encrypted in transit and at rest, stored on SOC 2 Type II-audited infrastructure.
- Your inputs are never used to train AI models — confirmed by MindStudio's Trust Center.
- Only authorized personnel have access to your data, and all access is logged.
- By using EntreDash, you accept our Confidentiality Terms, which contractually bind us to keep your inputs confidential.
Under U.S. patent law (35 U.S.C. § 102), a "public disclosure" generally means making an invention available to the public in a way that puts the relevant field on notice. Using a confidential, encrypted tool that does not share or publish your inputs is materially different from posting your idea on a public forum, blog, or trade show.
This page is not legal advice. For binding determinations about your specific situation, consult a registered patent attorney.
What happens if EntreDash is acquired or shuts down?
Your data remains yours. In the event of acquisition or wind-down, you will receive notice and an export window to download everything you've created before any change to access. We will never sell or transfer your invention data without your explicit consent.
What happens if there is a security incident?
If any incident affects your data, you will be notified directly, and we follow breach-notification timelines aligned with GDPR (within 72 hours of becoming aware) and applicable state laws.
How do I report a security concern?
Email security@entredash.com — we read every message and respond within one business day.
Independent verification
Don't take our word for it. Every claim on this page is independently verifiable:
- MindStudio Trust Center — full audit reports, control disclosures, subprocessor list
- Terms of Service — including Confidentiality Terms
- Privacy Policy — what we collect, what we do with it