For enterprise IP & R&D teams

One governed place to certify the ideas, data and trade secrets your teams create every day, with the sign-in, access controls and EU hosting your security and legal teams expect.

Bitcoin certificate
EU qualified timestamp
China trusted timestamp
SAML & OIDC single sign-on
Zero-knowledge encryption

The IP your organization creates every day

Enterprise innovation moves faster than the formal IP system was built to handle. Long before anything is filed, your teams generate source code, designs, experimental data, specifications, and know-how - continuously, across departments and time zones. Most of it is valuable. Almost none of it is systematically documented.

When a dispute, an audit, or a competitor's patent forces the question "what did we have, and when did we have it?", scattered drives and email threads are not an answer. Trade-secret protection depends on demonstrating reasonable measures. Prior-use and prior-art defenses depend on verifiable records of development and use. Both require records you can produce years later to support your position.

Bernstein gives your IP and R&D teams one governed place to certify that evidence as the work happens: a Bitcoin blockchain certificate plus EU qualified and China trusted timestamps, without ever disclosing the files.

Since 2016, Bernstein has certified work for customers in more than 40 countries.

Bernstein certificates - a Bitcoin certificate and trusted timestamp certificates

What each team gets

An enterprise rollout needs a yes from IP, R&D, security and procurement. Here is what each of them gets.

IP & legal

Dated, independently verifiable evidence for trade secrets, prior use and disputes - the records your counsel will be asked for.

R&D & engineering

Certify code, data and designs as the work happens, without changing how your teams work.

Security & IT

Zero-knowledge encryption, single sign-on, passkeys and EU hosting. We never see your files.

Procurement & finance

Credit quotas per user or organization for predictable spend, and certificates that stay verifiable without us.

Run a trade-secret program at scale

Trade-secret protection is not a filing - it is a discipline. Courts ask whether you took reasonable measures to keep information secret, and whether you can prove what the secret was and since when. For an enterprise with hundreds of contributors, that discipline has to be systematic, not ad hoc.

Certify at creation

Certify sensitive documents, code and datasets the moment they're created - a verifiable date, without revealing a single line.

Share on your terms

Share certified files with partners through Secure Sharing - they accept your confidentiality terms before opening anything, alongside your NDAs.

Tie evidence to contracts

Reference certified fingerprints in NDAs, employment agreements, and licensing contracts to define exactly what is protected.

Show reasonable measures

Keep a documented trail of what was certified, shared and with whom - the reasonable measures courts ask you to show.

Strengthen your position in IP disputes

When someone challenges your rights, dated, certified evidence puts you on firmer ground.

Trademarks

Certify product images, marketing materials, and sales records to show when and how you used your mark.

Copyright, including software

Certify creative works, source code, and each new version to show what existed, and when, if authorship or ownership is challenged.

Prior-use rights

Keep dated records of how your technology was developed and used, to support your freedom to operate.

Prior art

Dated records of what your teams invented support prior-art arguments - and, when you choose to publish defensively, help stop others from patenting it.

Governance built for the enterprise

Deploy Bernstein across your organization with the controls your security, legal, and IT teams expect.

Role-based access & policies

Assign roles and access policies so the right people can certify, review, and retrieve evidence - and no one else. Structure permissions around teams, projects, and business units.

SSO with SAML & OIDC

Connect Bernstein to your identity provider with SAML or OIDC single sign-on. Your teams sign in with the accounts they already have.

Passkey authentication

Add phishing-resistant passkeys for high-assurance access, alongside single sign-on and multi-factor login.

Credit quotas

Allocate certification credits per user or organization to keep budget and usage predictable.

Activity logs you can export

Export your activity logs to show who did what, and when. Secure Sharing events are hash-chained, so any tampering shows.

EU hosting or dedicated storage

Encrypted files are stored in EU-based AWS data centers. Need them elsewhere? Enterprise deployments can use a dedicated S3-compatible backend, on your own infrastructure or in a specific region, as a custom setup, priced separately.

Branded Spaces

Give departments or subsidiaries their own branded Space, with its own identity, users, and certified project history.

Zero-knowledge architecture

Zero-knowledge architecture - files are encrypted in your browser, so we store only ciphertext we cannot read.

Verifiable without us

Verify certificates independently using open cryptographic standards, with no dependency on Bernstein to prove them.

Answers for your IT, legal, and procurement teams

Bernstein uses a zero-knowledge architecture - your files are encrypted in your browser before reaching our servers. We store encrypted files and cannot read their contents. Only cryptographic fingerprints are recorded on the Bitcoin blockchain or sent to timestamping authorities. Two opt-in features work differently - Direct Share emails the decryption key inside the share link, and certifying by email processes the file on our servers.

Encrypted files are stored in EU-based AWS data centers. Enterprise deployments can also be configured with a dedicated S3-compatible storage backend, including customer-owned infrastructure or a specific region, to meet data-residency requirements. This is a custom setup, priced separately.

Connect your identity provider through SAML or OIDC single sign-on. Passkeys and multi-factor authentication add extra protection.

Use roles and access policies to organize permissions across teams, projects, and business units. Departments or subsidiaries can each run their own branded Space, with their own users and certified project history.

Export your activity logs for review - Secure Sharing events are hash-chained, so tampering shows. Set certification credit quotas per user or organization to keep usage and budgets in check.

Yes. Anyone can validate certificates independently using open cryptographic standards, without involving Bernstein. Keep the certificates, the original certified files (including the project cover file) and the validation data, so the evidence stays available for validation.

For enterprise IP & R&D teams

The IP your organization creates every day