How can we protect an idea or confidential requirement shared with a developer?
Risk can be reduced, but not by a verbal promise not to copy. Sign an appropriate NDA before detailed disclosure and reveal information in stages. The project agreement should distinguish confidential information, client-owned background assets, newly created deliverables, supplier background technology, and third-party components. Use separate repositories, least privilege, access logs, and immediate offboarding. An abstract idea is not usually monopolized by copyright; trade-secret protection also requires secrecy, commercial value, and corresponding protective measures.
| Information | Example | Primary protection | Boundary |
|---|---|---|---|
| Abstract idea | “An AI recruitment platform” | Limited disclosure, validation, brand, execution | Copyright generally protects expression, not the idea itself |
| Confidential operations | Customers, pricing, supply chain, unpublished rules | NDA, trade-secret policy, access and evidence | Protection requires continuing secrecy measures |
| Project expression/output | PRD, design, custom code, documents | Ownership/license terms and asset register | Creator, payment, scope, and rights must be clear |
| Background/third-party assets | Supplier framework, open source, cloud, fonts | Reserved background IP and license register | A supplier cannot transfer rights it does not own |
When translating compliance duties into evidence and controls, also compare How should a privacy-intensive app operating internationally protect its users?; the linked guidance adds context that should be considered in the same decision.
Patent, trademark, copyright, and trade secret solve different problems. Public disclosure can affect a potential patent; obtain patent advice before a pitch or release. Brand names may need trademark strategy. Code, documents, and design can involve copyright. Confidential business or technical information relies on continued secrecy. This is not legal advice.
An NDA should identify parties, covered information, permitted purpose, authorized people, safeguards, employee and subcontractor conditions, compelled disclosure, return or destruction, duration, remedies, and dispute mechanism. Oral disclosure may need written confirmation. Common exclusions include information already lawfully known, public without breach, lawfully received from an authorized third party, or independently developed. An overbroad ban on all industry work may be impractical; any non-compete restriction needs defined competitors, product, region, term, and consideration.
The development contract then allocates rights. List client trademarks, data, workflows, and material; supplier frameworks and tools; project-specific output; and open-source or commercial dependencies. For each, state ownership or license, geography, term, modification and sublicense rights, delivery form, and conditions for rights to vest. Source delivery does not automatically transfer all copyright, and copyright ownership does not override third-party licenses.
Client data may be used only for the agreed project purpose, not another customer's model training or demonstration. Any anonymized statistics need an explicit method and purpose. Suppliers may retain general know-how that contains no client confidential information, but cannot replicate the client's proprietary data, assets, rule combination, or identity.
Disclose redacted processes and synthetic data during initial evaluation, then grant real access only after agreement. Use a separate repository, cloud project, database, and keys for each client. Prohibit personal drives, unapproved AI/chat tools, and unlogged production access. Revoke accounts and keys when a person leaves, inspect copies and attachments, and document return or destruction at project end.
Wavesteam can sign a reasonable NDA and itemize these rights and controls. Our transparent delivery standard is first-party process guidance; the contract and actual permission, log, dependency, and offboarding records prove protection. China's current Anti-Unfair Competition Law and Copyright Law provide the legal framework, while counsel should advise on the specific transaction.