End-to-End Encryption
All traffic between your browser and our platform is protected with TLS 1.3. Stored data is encrypted at rest with AES-256.
Security & Compliance
Your data is treated with the same seriousness your brand deserves.
The integrity of our customers' data is non-negotiable. We built the platform with strict security, privacy, and legal compliance policies from day one.
Technical Pillars
Security by Design, Not by Obligation.
Each layer of the platform was built with controls that limit the impact of any failure and ensure that customer data is always protected.
Data Stored in Brazil
All platform information resides on servers located within the national territory, under the jurisdiction of Brazilian law and the LGPD.
Role-based Access Control
Each user accesses exclusively the data of their organization. Strict account isolation ensures that no information is shared between clients.
Operation Auditing
All sensitive actions — data access, configuration changes, exports — are logged in an immutable log with user identification and timestamp.
Daily Automated Backups
Backups are automatically generated every day, with integrity checks and retention defined by policy. Data recovery is regularly tested.
Layered Defense Architecture
Separation between presentation, logic, and data layers. Input validation at all system boundaries. No direct database exposure to public networks.
Legal Compliance
Full Compliance with the LGPD.
The processing of personal data on the TrademarkIQ platform is based on explicit legal grounds as set out in Art. 7 of Law No. 13,709/2018: contract execution, legal obligation, and, where applicable, revocable consent.
We maintain a Data Protection Officer (DPO) with a direct channel for data subject rights. We respond to requests within 15 business days.
Rights Guaranteed to Data Subjects
- Access to processed data
- Correction of incorrect data
- Deletion of unnecessary data
- Data Portability
- Revocation of Consent
- Information on Sharing with Third Parties
DPO Contact: [email protected]
Our Commitments
What We Never Do with Your Data.
Customer data is not sold to third parties
Data is not used to train third-party AI models
Marketing communications require explicit and revocable consent
After termination, data is deleted within the timeframes set by the LGPD
Security incidents are reported within legal timeframes to the ANPD and affected data subjects
Have Questions About Security or Privacy?
Our team responds to due diligence requests, audits, and technical security questions.