How the platform works

From spotting a counterfeit to proving it was taken down. IP Defender continuously watches marketplaces, search engines, social networks and newly registered domain names for unauthorised use of your brands. You decide what deserves a case; the platform handles the analysis, drafts the letters, sends them and tracks them through to the recipient’s reply. This guide describes each module, the statuses it surfaces and the actions you can trigger there.

The six stages, and what each one hands to the next.

01Monitor

Everything starts from what you declare. A brand with no keywords and no watch profile generates no alerts: these five modules are the engine tuning of the platform.

Brands

The portfolio you have us watch

Every brand is the anchor for everything else: keywords, watch profiles, alerts, cases and reports all hang off a brand. It is also the main filter on your dashboard.

What to provide

The commercial name, the registered titles attached to it — filing number, office, Nice classes, jurisdictions — and the official assets that must never be reported.

Why the titles matterThe legal grounds of a case and the content of a cease and desist letter are built from your registered titles. An incomplete portfolio produces weaker letters.

Keywords

The terms we search for, and the ones we ignore

Each keyword carries a type that determines its role in the search.

TypeUse
BrandThe protected name itself.
ProductA range or a specific reference to watch.
Typo variantMisspellings and transliterations used by counterfeiters.
NegativeA term that disqualifies a result. Cuts noise sharply.
CompetitorComparative tracking, with no intent to act.
GenericA broad term — use sparingly, the volume is high.

Statuses

ActiveInactiveArchived

An inactive keyword stays visible but is no longer scanned.

Actions

Duplicate
Copies the keyword so you can build a variant without starting over.

Watch profiles

Where, when and how often we search

A profile ties a brand to a selection of keywords, a set of channels and a frequency. It is what triggers the automated scans.

One profile, one scan, one batch of alerts. Markets multiply the calls; languages do not.

Channels

Marketplace, social network, search, advertising, app store, domain names. The domain names channel runs through a separate pipeline (monitoring of new registrations) and feeds domain alerts; every other channel feeds ordinary alerts.

Geographic and language scope

The anchor markets decide which country the search is issued from and which marketplace domain is queried (amazon.fr, ebay.fr…). Every market you add multiplies the external calls. The languages covered, on the other hand, are combined into a single query: adding more costs nothing.

Recommended settingOne anchor market, several languages. That is the combination that widens coverage without multiplying consumption.

Frequency and statuses

Hourly, daily, weekly or monthly.

ActivePausedInactiveArchived

Actions

Run a search
Runs the selected profiles immediately, without waiting for the next due date. With nothing selected, every active profile runs. Each run leaves a trace in the scan history: profile, channel, date, volume collected, any errors.

Exclusions

The rules that silence recurring noise

An exclusion applies upstream of triage: matching future alerts are set aside automatically, and alerts already present are re-evaluated the moment the rule is activated.

CriterionExample
KeywordA term that systematically brings back false positives.
SellerAn authorised distributor that shows up in every scan.
DomainA partner site or a price comparison engine.
URLOne specific page to ignore.
Channel, platform, countryA cross-cutting restriction.

Two possible effects

  • Ignore files the alert silently — it disappears from your triage screens.
  • Reject marks it as dismissed, keeping a record of the reason.

Scope

A rule can be limited to one or several brands, or apply to the whole organization. You create it from this module or straight from an alert, which pre-fills the value.

Official assets

Your own sites and shops

Declare them in their own module so they are never reported. The Verify ownership action checks a DNS TXT record on the domain before adding it to the allow list — that is what stops a third party from passing their site off as yours.

02Triage

Scans produce alerts. At this stage nothing is qualified: your job is to separate what deserves a case from the rest.

Alerts

Content spotted by monitoring, before review

An alert is a page: a marketplace listing, a search result, a post, an advert. It carries the URL, the title, the seller, the price, the country, the detection date and the watch profile that produced it.

What a triage queue looks like: raw rows, a status on each, and the rules that empty it for you.
StatusMeaning
NewNever reviewed. This is your queue.
To reviewKept by triage and waiting on you. Shown as Triaged in older exports.
EscalatedA case was opened from it.
AllowedLegitimate use: authorised reseller, official asset.
DismissedFalse positive or out of scope.
Brand not foundTriage did not find the brand on the page.
EnforcedAn action succeeded on this alert.
ArchivedOut of the current views.
Nothing is set aside without a traceWhen an alert is dismissed automatically, the reason is kept (official asset, exclusion rule, negative keyword, brand not found) along with the exact rule that fired.

Reading the list

Each card carries two colours, and they answer two different questions. The left edge is the status — where the alert sits in the workflow. The strip across the thumbnail is the risk band — how much it matters. An alert can be escalated and low risk, or never reviewed and critical, so neither colour can stand in for the other.

Two columns that look like they contradict each otherAn alert can show a risk score of 95 and, next to it, Brand use confirmed. They are not the same measurement. The risk score is set when the alert is collected, from how closely the search result matches the watched brand. Brand use is the verdict of enrichment — the step that opens the page — and on most alerts that step has not run. The sheet says Not checked yet rather than No when nobody has looked: not looking is not a finding. Where the brand name is visible in the collected text — the title, the page text or the address — the sheet says so and says where.

Why this score

Every alert sheet carries a Why this score block: the score, its band, and the signals present on that alert — where the brand name was found, the name similarity measured at collection, the watch term that found it, what kind of site it sits on, whether goods are priced. A minus sign marks what is missing, including the one that explains most surprises: the page has never been opened.

Risk bandScoreReading
Critical75 – 100Strong signals of infringement. Look at these first.
High50 – 74Worth a case in most cases.
Medium25 – 49Context decides. Often a reseller or a homonym.
Low1 – 24Kept for the record rather than for action.
Not scored—Analysis has not run on this alert yet.

Narrowing the list

Six filters, and each option says how many alerts it would leave you. The counts are computed against the filters you have already set, so an option is never offered that leads to an empty list — and choosing an organisation reduces the brand list to that organisation’s brands.

FilterWhat it narrows on
OrganizationOnly shown when your account covers more than one.
BrandThe brand the alert was raised against.
StatusThe triage states in the table above.
Risk levelA floor, not a band: High — 50 and up includes the critical ones.
ChannelWhere it was found: marketplaces, websites, e-commerce, social networks, domains, advertising.
Website categoryWhat kind of site the domain is — e-commerce, marketplace, news, corporate, and so on. Comes from the domain record, so alerts whose domain has not been analysed read Unclassified.
The list remembers where you left itFilters, sort order and the card / table choice are kept in your browser between visits. Whatever is active is always shown as a removable chip above the list, and Clear all returns you to everything. Press / to jump to the search box, and Export CSV to take exactly the rows on screen, in the order they are on screen, somewhere else.

Enrichment

A raw alert only contains what the search engine returned. Enrichment actually opens the page to extract the product, the seller and their contact details. The state shows on every row:

Not analysedIn progressEnrichedFailedSkipped

Actions

The Workflow menu on an alert opens with Promote to case highlighted and first. It is the step the rest of the alert exists for; everything else on the menu is a way of not doing it.

Create a case
Turns one or several selected alerts into a case and starts the initial analysis. If a case already exists for one of them, the action stops and tells you — you can re-run it forcing the creation.
Enrich the page Billable
Product and contact extraction by the analysis agent.
Scan the page Billable
Full product and seller analysis, updating the linked product record and operator.
Search for domains Billable
Looks for domain names reusing the brand, starting from this alert.
Create an exclusion
Generates a rule from the alert (seller, domain or URL pre-filled) and re-evaluates the existing alerts.

Domain alerts

A newly registered domain name that looks like your brand

These alerts do not come from a page but from monitoring of the registries. Each row is a brand × domain pair, with the registration date and a typosquatting score.

The score is a resemblance, not a verdict. Read it with the registry action next to it.

Reading the score

ScoreReading
≥ 0.90Very strong resemblance. Look at it first.
0.75 – 0.89Clear resemblance, context worth checking.
< 0.75Probably a coincidence, unless something else says otherwise.

The registry action column states the event observed: added (a fresh registration, the most sensitive case), updated or dropped.

Statuses

NewReviewedAllowedDismissedEscalatedArchived

Actions

Create a case Billable
Opens one case per selected alert, launches the capture, the archive and the WHOIS record, and enriches the domain. The case priority is derived from the score, raised one notch for a fresh registration.

03Qualify

The case is the unit of work. Everything that follows — analyses, actions, letters, evidence — attaches to it.

Cases

A qualified infringement, with its reference, owner and history

A case brings together one or more alerts covering the same infringement. It carries a reference, a brand, a priority, an owner, a risk score and a summary written during analysis and then reviewed.

The case record: everything an enforcement decision needs, on one screen.
StatusMeaning
DraftCreated, not yet investigated.
InvestigatingAnalysis under way: product, seller, grounds.
EscalatedInfringement confirmed, action to be taken.
EnforcementOne or more actions are in progress.
ResolvedThe content was removed or an agreement was reached.
ClosedClosed with no follow-up. A reason and a closing note are kept.
ArchivedOut of the current views.

The priority (low, medium, high, critical) is proposed automatically and stays editable. The risk score (0–100) is computed from the attached alerts.

Taking cases out of the portal

The Export button offers four documents, and every one of them is built from what the filters have left on screen — the filters themselves are printed on the document, because a list of forty cases out of three hundred with nothing saying which forty will be misread the week after it is sent.

ExportWhat it is for
Case sheets (PDF)The twenty most recent cases of the view, one block each, carrying what the record sheet shows: the seller and how to reach them, the domain and the URL, what was found, what it is worth, and the summary. This is the document you forward.
Spreadsheet (xlsx)Every case the view is showing, thirty-two columns, as a real Excel workbook — the risk score and the estimated value arrive as numbers, so the column adds up.
Spreadsheet (csv)The same columns for whatever else has to read them.
Print the listThe table as it is on screen, on A4 landscape.

The case record

Every case opens on a summary view gathering the screenshot, the identified product, the operator, the legal grounds, the actions taken and the exchanges. The analysis buttons are directly available there. After each action the record shows the state of the last run: in progress while the analysis is running, then done or error with the message returned. An action in progress is not blocking — you can carry on working.

Actions

Scan the page Billable
Opens the main URL and extracts the product and the seller, then updates the product record and the operator.
Enrich the pages of the case Billable
Applies enrichment to every attached alert in one pass.
Search for contacts Billable
Identifies the operator: legal entity, address, contact name and email. Fills empty fields only, never overwrites data already validated.
Qualify the legal grounds Billable
Proposes and attaches the applicable grounds from the brand’s registered titles.
Compute the risk score Billable
Summarises overall risk from the attached alerts.
Take a screenshot
Timestamped capture of the main URL, saved as evidence and attached to the case.
Search for domains Billable
Extends the search to domain names linked to this matter.
Create an action
Starts a step: marketplace takedown, domain dispute, cease and desist… The due date is computed from the average response time of the platform.
Launch a test purchase Billable
Creates the action together with its probative record. The price of the product itself is advanced and re-invoiced separately.
Close the case
Asks for a reason (resolved, abandoned, archived) and an optional closing note, then notifies the team.

04Identify

Three cross-cutting reference lists answering three questions: which product, which seller, which site. They fill themselves as the analyses run and can be consulted independently of any case.

Products

The same article, grouped across every site it appears on

When the same counterfeit is sold across twelve listings, the platform gathers them into a single product record: name, reference, description, image, price range, number of sellers, first and last sighting.

Twelve listings, one article. The grouping is what turns scattered alerts into a case worth opening.

What to look at

Brand use confirmed means the brand does appear in at least one listing — that is the signal separating an infringement from a mere resemblance. The counterfeit indicators list the signals picked up (price, wording, origin). The estimated Nice class is compared with the classes of your registered titles.

Statuses

ActiveMergedAllowedIgnoredArchived

Product sellers

The person or company behind the listings

Every one of them is on the Product sellers page. An observed seller only becomes one we act against once its listings infringe your rights. The status carries that nuance: Active for a confirmed infringement, Monitoring while doubt remains, Allowed for a legitimate reseller, Excluded for a definitive false positive.

The record

Entity type (individual, company, network), country, risk level, structured postal details, emails, contact form, own website, selling countries, observed identifiers (VAT numbers, registrations, accounts). The linked products, domains, cases and actions are listed there.

Named contactsContacts identified at an operator are personal data, collected in defence of your intellectual property rights. A contact may only be used in a letter after human verification: a name wrongly attributed in a cease and desist exposes you.

What we still have to find

A letter needs four things: a contact, an email, a postal address and a country. Each card carries four dots saying which of them we hold, the Ready to write tile counts the sellers that have all four, and the Data found buttons narrow the list to the ones that carry the facts you need — press two and you get the sellers reachable both ways.

Correcting a seller

This page is editable. Open a seller and use Edit this sheet: the form offers exactly the fields your role may change, so what you see there is what you may write. New seller records one by hand — a name is enough to start, and the rest is filled on the sheet that opens.

The name on the listing is not the companyTwo columns say two different things. Seller name is the shop front the marketplace prints; Declared legal name is the entity the seller states on its own legal-notice page. Only the second is a name a letter can be addressed to, and neither is ever deduced from the other.

The marketplace is not the seller

A listing on a marketplace involves two companies, and they are not interchangeable. The venue is the site the listing sits on; the seller is the trader who put it there. A sheet can carry both, and the one you are acting against decides where the letter goes: a cease and desist meant for the trader, addressed to the marketplace’s legal department, reaches a company that did not make the goods and cannot stop making them.

The platform works it out from the listing itself — the storefront, the site it is on, and the marketplace reference list — and shows you what it concluded. Where it is wrong, say so on the sheet: a correction made by a person is recorded as one, and it is not overwritten the next time the site is scanned.

Actions

Search for contacts Billable
Completes the record from seller pages, registries and public sources. Fills empty fields only.

Taking the list with you

Export offers four: seller sheets as a PDF (the twenty most recent of whatever the filters left, one block each), the whole filtered list as an Excel workbook or as CSV, and the table printed as it is. Every one of them names the filters that produced it on the document itself.

Domains

The reference list of suspect sites and their holders

A domain appears here once, whichever brand is concerned, with its registration data, its host and its country. Domain alerts point to it; this is where the history consolidates.

Actions

Exclude this domain
Creates the matching exclusion rule for the chosen brands, updates the domain status and re-evaluates the existing alerts.
Search for domains Billable
Starts from this domain to look for others, similar or held by the same registrant.

05Act

Two levels not to be confused: the action is the step you take and it carries the result; the letter is the document that gives it form. One action can involve several letters — first contact, reminder, cease and desist.

Preparing a demand, step by step

Ten questions, in the order the answers become available

A cease and desist is not a form. It is a chain of findings — what you own, who they are, whether the two collide — and each link has to hold before the next one is worth making. The request page walks that chain: ten steps, each one a single question, each settled by a person and stamped with their name and the date.

Nothing advances on its own. A step becomes settled when you say it is, and the green button at the foot of the panel then carries you to the next question. You can go back to any step and change your answer; the trail keeps both, because a decision that changed is more informative than a decision that appears never to have been made.

The ten steps

#StepThe question it answers
01OverviewWhat do we know about this case?
02Our rightsWhich of your registrations covers this?
03The other partyWho is this, legally, and where do they sit?
04Their rightsDoes the seller hold a right that would defeat ours?
05AssessmentDo the rights actually overlap, and how strong is this?
06ContactsWho can we write to, and how do we know?
07RecipientThis letter goes to…
08LetterWhat are we asking, and in which words?
09ApprovalWho signs this off?
10SendHow does it leave, and what comes back?

Steps 2 and 4: the two halves of one question

Our rights is where you tick the registrations the letter will quote. Ticked titles are the ones that appear in it — which is what replaces a template guessing at which marks are being invoked. The filters propose the marks matching the brand, the territory and the Nice classes of the listing, because those three are what makes a registration relevant to this case rather than merely yours.

Their rights searches the registers for a mark held by the other side that would defeat yours. This step deliberately cannot conclude. It produces a dated search and a statement signed by whoever ran it — not a verdict — because “we found nothing” and “there is nothing” are different sentences and only the first one is true.

Step 5: the judgement, and what it is careful not to say

Steps 2 and 4 each answer half a question, and the Assessment puts the two halves side by side: the marks you hold against the marks they hold, the goods against the goods, the territory against the territory. What overlaps is drawn; what does not is drawn too, because the gaps are the argument the other side will make.

Beside it sit four axes you set yourself — how confident you are, how serious it is, how urgent, and how solid the evidence — and a recommended action that follows from them. An AI analysis button fills the four in as a proposal; a proposal is marked as one until a person confirms it, and the name recorded against the assessment is always the person’s, never the model’s.

The platform never says “counterfeit”Until a court or a competent authority has ruled, no software is in a position to qualify the facts. The wording throughout is probable infringement or suspected counterfeiting, and the assessment is a working judgement recorded by a named person on a given date — which is what makes it useful in a file, and what keeps it honest.

Steps 6 and 7: an address is not a recipient

Contacts lists every address known for the operator, each one carrying where it came from — a public register, a legal notice page, a marketplace profile, a reply you received. Provenance matters more here than quantity: one address off the company register is worth five scraped from a storefront.

Recipient is the choice of who the letter is addressed to, and it is bounded by a rule that does not bend: only a verified contact — one a human has confirmed — can be named in a formal notice. Naming the wrong individual in a cease and desist is a defamation risk, so the step will show you an unverified address and refuse to put a person’s name on it.

Step 8: one choice decides the letter

The action you are taking decides the template, and the template decides the wording. That choice is carried over from your assessment at step 5 — changing it here is allowed, and when you do, the panel says plainly which action step 5 had recommended, so an override is a decision rather than a slip.

The panel also states, before anything is generated, who the letter comes from and on what basis: the marks being claimed, the recipient it is addressed to, and the signature. That last one is not a preference. A firm writes on behalf of its client because that is what a firm is; a rights holder writes in its own name because the right is its own. The platform derives it from your organisation’s profile, and an explicit setting on the organisation record overrides the derivation — a choice somebody recorded always beats one the software worked out.

How the letter travels — email, registered post, the marketplace’s own complaint form — and the language it is written in are chosen here too. The shape of the letter follows the channel: an email does not open on a postal address.

Steps 9 and 10: leaving, and coming back

Approval is given on the message exactly as it will leave — recipient, channel, sender and date included — and not on a draft that still might change. Send then shows the departure and everything that follows it: delivery, the reply if one comes, the reminder at day fifteen, and the outcome.

The trail, and the time it took

Every settled step is written down as it happens: who settled what, on which day. That list is the case’s own account of how it was built, and it is the reason a file assembled over three weeks can be explained to somebody who was not there.

It is also what the time sheets are built from. Settling a step is work — somebody read a register, compared two names, decided — and each one logs an entry at the usual duration for that kind of step. Those entries are marked automatic: they are estimates of a step’s ordinary shape, not measurements of you, and our team corrects them where the real work was longer or shorter. Re-settling a step never logs it twice.

Actions

The step taken on a case, with its due date and outcome

Available types

TypeCounterparty
Marketplace takedownThe intellectual property team of the marketplace.
Domain disputeThe registrar or the applicable dispute resolution procedure.
Cease and desistThe operator directly.
Hosting complaintThe host of the infringing site.
Search delistingThe search engine.
Social media reportThe social platform.
Payment provider reportThe payment provider of the site.
Test purchaseA probative order and an authenticity assessment.

Statuses and outcome

DraftSubmittedOngoingCompliedRejectedFailedCancelled

The outcome describes what actually happened, independently of the status: content removed, account suspended, domain suspended, no response, escalated. That is the field feeding the success rate on your dashboard.

The due date is computed at creation from the average response time observed on the platform being addressed.

Actions

Generate a letter Billable
Selects the right template and personalises it with the case data.

Actions & requests

Every demand made of the other side, with the letter that carries it

An action and its letters are one thing read apart: the action is what is being asked for, the letter is how it was put. The Actions & requests page puts them back together — one card per demand, with its letters underneath — so the question “what is outstanding on the whole account, and who is it waiting on” has a page instead of a tour through every case.

The three stages

StageWhat it means
Being preparedNothing has left our side yet. The demand exists, the letter may still be a draft.
Waiting on themIt has gone out and no answer has come back. This is the pile that ages.
SettledIt ended, whichever way it ended — complied with, rejected, abandoned.

The stage is not the status column. A status is one of fourteen values spread over two collections; the stage answers who is holding the request, which is the only question a list of them is read with. A date always beats a status where the two disagree: an action carrying a submission date has been submitted, whatever its status was last set to by hand.

Three ways of reading the same list

The same requests, laid out for three different mornings. Cards answer “what is this demand” — the whole story of one, letters included. Kanban answers “where is the work”, one column per stage, and an empty column is a fact worth the space it takes. Table answers “which one of these three hundred”. The choice is remembered in your browser. Nothing on the board can be dragged: moving a card between those columns would mean claiming a letter went out, and there is exactly one place in this portal where a step like that is taken — the record itself, behind the confirmation its workflow declares.

One demand, several cases

A seller with forty listings is forty cases, and it is not forty demands. An action can cover several cases at once: one of them is the lead case — the one the letter is addressed about, and the one the credits are charged to — and the others are listed beside it on the card, each one a link. All of them are searchable from this page, so a grouped demand is findable from any of the cases it covers, and each of those cases shows the action on its own sheet rather than looking as though nothing had been done about it.

Past their deadlineEvery action carries a due date computed from the platform’s own average response time. A request past it, and not yet settled, is counted on the tile and marked on its card — until it settles, after which the date is history rather than a warning.

Running the next step from here

Each card carries a Workflow button, and so does each letter under it: the steps of a demand (generate a letter, close it) are not the steps of the letter (approve, produce the PDF, send, post). Choosing one opens the record it belongs to with that step ready to confirm — the wording, the form and the permission check are the record’s own, because there is exactly one place in the portal where anything is actually sent.

A letter whose action you cannot see is still listed, on a card of its own, marked as such. A letter nobody can account for is precisely the one worth seeing.

Seller contacts

Who the letter is actually addressed to

An action needs a recipient. The Seller contacts page is every address and every name we have found behind the operators you are acting against — collected from public registers, legal notice pages, contact pages and marketplace profiles, and from the replies you receive.

What we look for, and what we found

Four things make a recipient usable: a name, an email, a postal address and a phone. The Data found filter narrows the list to the contacts that carry the ones you need — press two of them and you get the contacts reachable both ways, which is the list a registered letter with an email copy is built from.

A contact with no name is not a mistake. A functional address (legal@, abuse@) never had one, and a row collected from a legal notice page often carries only a number. Those are marked Further research is required: the address works, the person behind it is still unknown.

Verification is a human act

To be verifiedVerifiedRejectedArchived

A contact stays To be verified until a person — not an algorithm — has confirmed it, and only a verified contact can be used in a formal letter. That rule is not administrative caution: a name attributed to the wrong individual in a cease and desist is a defamation risk, which is why the decision never happens through a form on your side.

Everything about a contact is read-only hereTo correct, verify or erase one, open a support ticket naming it and what should change. Our team makes the change and the record keeps the trace.

Personal data, and how long we keep it

These records are personal data. The legal basis is legitimate interest — the defence of intellectual property rights — and the purpose is exactly one: identifying the recipient of a notice. Harvesting personal social media is not done at all.

Each contact carries a retention date, by default twenty-four months after it was last useful. When it passes, the contact is marked Purge proposed and enters a review queue; nothing is deleted automatically, because an erasure nobody looked at is as much of a mistake as one nobody made.

From a contact you can open the operator it belongs to, and View all operator contacts puts every address recorded at that company side by side — which is how you decide who a letter should go to when there are three.

The preferred contact

Once that decision is made it is recorded: a contact sheet carries a Preferred contact switch, and the one marked leads the list wherever the platform offers a recipient. There is one per operator — marking a second releases the first, because the question has one answer.

It says which address the next letter goes to, and nothing else. In particular it does not make a contact usable: an unverified contact stays unusable in a letter whether or not it is preferred.

Letters

The document sent: content, recipient, delivery method, PDF

Choices at generation

SettingOptions
Letter typeAmicable first contact, cease and desist, reminder, final letter before escalation, marketplace IP complaint, DMCA takedown request, settlement proposal.
Delivery methodAutomatic (email if an address exists, otherwise postal mail), email, postal mail.
LanguageFrench or English.
SignatoryOrganization default, in your own name, or on behalf of the rights holder.
Read the warnings before approvingAt generation the platform flags the missing information and the points to check. These are the places where the text leans on uncertain data.

Choosing the recipient

A letter sheet lists the contacts recorded at the operator behind the case, under Send this letter to, with the preferred one first. Choosing one writes the name, the email and the organization onto the letter; the postal address is taken from the operator only where the letter still has none, so an address corrected by hand is never overwritten.

Two rules show themselves there rather than being enforced silently: a contact that has not been verified cannot be chosen at all, and once the letter is approved the list is there to be read and nothing more.

The approval circuit

Approval freezes the content. Everything you want to change, change it before that step.
StageWhat it means
GeneratedThe text is written. It remains fully editable.
Sent for approvalThe relevant users in the organization are notified.
ApprovedThe content is frozen. Check the recipient name, address and email before this step: they can no longer be changed afterwards.
Submitted / sentThe letter goes out and tracking starts.

Actions

Send for approval
Notifies the authorised users of the organization.
Approve the letter
Freezes the content. Irreversible.
Generate the PDF
Produces the PDF version of the letter, attached to the case.
Generate a share link
Creates a link valid for 90 days to the latest screenshot of the case, to be inserted in the body of the letter as supporting evidence.
Send and track Billable
Dispatches the letter according to its delivery method and opens delivery tracking. For a web form or a third-party API, the tracking row is created and completion stays manual.
Send as physical mail Billable
Routes the dispatch according to the recipient country: postal service for Europe, courier elsewhere. Available modes: registered with acknowledgement of receipt, scanned acknowledgement, tracked, or plain letter.

Letter templates

The wording a letter is built from — ours, and yours

Every letter is produced from a template. The Letter templates page lists the ones available on your account: read the exact wording before it is ever used, filter by letter type, language, sender or tone, and generate a letter from any of them against an open enforcement action.

The parts written in braces are the merge fields. They are filled in from the case when the letter is produced — the mark, the operator, the case reference, the deadline — which is why a template reads as a form rather than as a finished letter.

Writing your own

You are not limited to our library. Use New template to write your own wording: a name, a letter type, a language, a tone, the signatory, a subject and the body. It is shared with every member of your organization and with nobody else, and from that point it sits alongside ours in the list, with the same generation button.

  • Your own templates go through the same approval circuit, the same PDF and the same delivery methods as ours. Writing one changes the wording, not the safeguards.
  • Editing a template affects letters generated from then on. Letters already produced keep the wording they were written with.
  • Archiving takes a template out of the list and out of the generator without touching a single letter already sent.
Merge fields are the only moving partsAnything you leave in braces is replaced at generation. Anything else is sent exactly as you typed it — including a legal ground that does not apply to the case at hand.

Generating from a template

The generation window asks for one thing the platform cannot guess: the enforcement action the letter belongs to. Search it by case reference, case title, brand or action type — the list narrows as you type, and the case its operator, contacts and evidence come from is the one you pick. Everything else (letter type, language, signatory, delivery) is proposed from the template and stays editable.

A template is not legal adviceWording you write yourself is sent in your name. A cease and desist that overstates the right you hold is a liability — our legal team will review any template you want checked; open a support ticket with the wording and the jurisdiction it must hold up in.

06Follow up

After the dispatch, two things matter: what the recipient answers, and the proof you keep of it.

Exchanges

The full thread: dispatches, receipts, replies received

Every dispatch attempt creates an outbound row, every reply an inbound row attached to the original message. The thread reassembles itself even if the recipient replies from another address.

Outbound and inbound on one thread, with the delivery milestone on each row.

Delivery statuses

StatusMeaning
Draft / QueuedPrepared, not yet sent.
To submitWaiting for a manual submission (form, postal drop-off).
Submitted / SentHanded to the carrier or to the sending server.
In transit / Delivered / OpenedRouting and reading milestones.
Confirmed / RepliedAcknowledgement of receipt, or a reply received.
Returned / Rejected / FailedNot delivered. The exact reason is kept.

Actions

Reply Billable
Writes and sends an email reply keeping the thread. The subject and the recipient are derived from the selected exchange.
Resend Billable
Retries a failed email. Blocked if the message already went out.
Record a tracking event
Manually logs an event for postal or form-based dispatches: submission, transit, delivery, return, failure, with a tracking number and a carrier link.

Evidence

The timestamped items attached to a case

Screenshots, page archives, WHOIS records, test purchases, product photos, invoices, emails, letters, reports. Every item carries its capture date, its source and a digital fingerprint attesting that it has not been modified since.

Statuses

PendingCapturedInvalidFailedArchived
Capture before you sendA page taken down after notification can no longer be captured — and that is precisely the moment the evidence becomes useful.

Page monitoring

Automatically checks whether the infringing page has gone

A monitor sits on the URL of an open case and re-checks it every week or every month. It answers a single question: has the content been removed?

A removal is confirmed on two consistent checks — or on the first, if the server says the page is gone.

Result of each check

IdenticalChangedNewRemovedError

A removal is only confirmed after two consistent checks, or on the first one if the server explicitly answers that the page no longer exists. That caution avoids closing a case on a temporary outage.

Monitor statuses

ActivePausedSilentErrorStopped
Watch for “silent”“Silent” means no check has arrived for more than twice the expected cadence: the monitor stopped without saying so. That is the status to keep an eye on.

Test purchases

The probative order and its authenticity assessment

The module tracks the order, the delivery, the assessment and the verdict, with the associated items: photos, invoice, report. It is the strongest evidence against an operator who disputes the claim, and often the decisive item in proceedings.

The price of the product is advanced and re-invoiced separately.

Your rights, and where they apply

Every step above rests on one thing: a right you actually hold, in the country where the goods are sold. Three pages answer that — what we hold, what the official registers say, and what the law is where you are enforcing.

Registered trademarks

The titles we enforce on your behalf

Your portfolio as the platform holds it: denomination, jurisdiction, registration and application numbers, filing, registration and expiry dates, Nice classes, the owner name on the register and the image for a figurative mark.

Whose mark is it

Our brandsThird party brandsNot yet classified

A title is filed under your organization when its owner name matches one of the names declared on your organization record. Anything the register has not been reconciled with yet stays Not yet classified rather than being quietly counted as somebody else’s — if a mark of yours is sitting there, the fix is to add the owner name to your organization, not to edit the title.

An expired title enforces nothingThe list marks what is in force and what is not. A cease and desist grounded on a lapsed registration is worse than no letter at all, and the expiry date is on the card for that reason.

Search the registers

What we hold, and what the offices say — side by side

The Search trademarks page answers one question: does anyone hold a right on this name here? The left-hand column is your own portfolio filtered by what you typed; the right-hand column is what the official registers answer for the same name, which our rows cannot speak for.

Pick a jurisdiction and the page tells you which office keeps the register there and links straight into it. Arriving from a jurisdiction sheet, that country is already selected.

Why this comes before a letter

Two facts decide whether a case is worth opening: that you hold a right covering these goods, and that the other side does not. A mark registered by the operator in the country it sells from turns a takedown into a dispute — and that is a thing to know before writing, not after.

Jurisdictions

The countries you enforce in, their offices and their law

A reference sheet per country and per regional body: official name, codes, region, languages, currencies, whether UDRP applies, the trademark office that keeps the register, the regional office where there is one, and the text of the local trademark law with a link to its official source.

Three views of the same 255 rows — cards for one place at a time, a table to compare and sort, and a map, which is the one that answers “where are we actually working”. Every figure drawn on it is yours: your cases, your marks, your operators, your domains.

What a jurisdiction sheet holds

  • Six counters across the top: cases, operators based here, operators selling into here, trademarks, domains, and whether UDRP applies.
  • Four buttons on the office block: Search the register and Regional register go to the offices, Local legislation to the official text of the law, and Search known trademarks comes back into the platform with this country already chosen.
  • The ten most recent trademarks registered here, the operators, and the domains — each with a way to see the rest.
The law shown here is a reference, not adviceIt is the official text as the office publishes it. What it means for one case is a question for a lawyer — the AI assistant on the sheet will summarise the enforcement options, and our team will take it further through a ticket.

Reporting

What the platform makes visible, and what it can produce for your committees.

Dashboard

The throughput of the chain, stage by stage

Four counters aligned on the journey: alerts detected, cases opened, actions taken, letters produced. Between each counter, the conversion rate — that is where the friction points show.

Each section breaks down the split by status, a second axis (channel, priority, action type, delivery method) and the monthly trend. Clicking a bar, a pie slice or a counter opens the matching list.

Filters available: period, brand owner, brand, and a free keyword on titles, URLs, sellers and subjects.

A low conversion rate is not a bad sign in itselfBetween alerts and cases, it mostly tells you your monitoring is bringing back noise. Exclusions are the right lever.

Reports

Periodic editions, generated and archived

You define a schedule (frequency, brands covered, recipients) and the platform produces and archives the document. Past editions stay available, which lets you compare one period with another.

Support

Your requests, tracked by reference

Categories: question, ask an IP attorney, bug, feature request, billing, account, other. Priorities: low, medium, high, urgent.

Statuses

OpenIn progressWaiting for youResolvedClosed

Every ticket is a thread you can reply to. Give the address of the page concerned — it speeds up diagnosis considerably. The Related page URL field on the form is there for exactly that.

Asking an IP attorney

One category is not support and is not free. Ask an IP attorney puts a question to a qualified industrial-property attorney rather than to our team: is this case strong enough to push, is the wording of this letter safe to send, does the answer that just came back mean what it appears to mean. It is opened like any other ticket, and the fastest way in is from the record it is about — every case, letter and exchange carries the entry in its Actions menu, which brings the permalink and a subject with it.

What it costsTwo things are billed, by two different people. Counsel’s own time is invoiced to you by the firm, at the rate agreed with it: IP Defender takes no margin, no commission and no fee on it, and it never appears on your credit ledger. Our work around the referral — assembling the file, the evidence pack, transmitting it, following up and reporting back — is charged at 80 credits per 30 minutes, and that is what your ledger shows against the case. Nothing is charged for opening the ticket, and nothing is charged if we come back and tell you counsel is not needed.

Your account

What the service costs, what was done for it, who on your side can see what, and how the platform reaches you.

Credits and the ledger

One line per charge, and nothing is ever rewritten

Billable acts are paid in credits. Your plan grants a monthly allowance; anything beyond it is drawn from top-ups. The Credit ledger is the record of every movement: date, action, quantity, unit cost, the case or record it belongs to, and the resulting balance.

Watching costs nothing. Scans, domain watches and the automatic searches that enrich what they find are covered by your monitoring subscription, not by your credits — a month in which you decide nothing costs you nothing. Credits pay for what you choose to do about a finding: investigating it by hand, gathering evidence, writing and sending demands, escalating.

The ledger is append-only. An entry is never edited and never deleted — a correction is a new entry that reverses the first one. That is the whole reason it can be audited, and the reason a charge you dispute stays visible next to its reversal.

Reading a charge

ColumnWhat it tells you
ActionThe catalogue entry that was applied. It is the same list as on the pricing page.
ModeAutomatic, manual, or triggered by you. The same act costs differently depending on who carried it out.
QuantityHow many units. Ten pages enriched is one entry with a quantity of ten, not ten entries.
Attached toThe case, alert or product the charge belongs to. Two thirds of the spend hangs off a product rather than a case, so a case total is not the whole picture.
Every billable action tells you the price before you press itThe confirmation window carries the amount. Nothing is charged behind a button that did not say so.

What actions cost

The whole catalogue, before you spend anything

The What actions cost page is the price list in full: every billable act, what it does, and what it costs in credits — automatically and when an analyst carries it out. Some entries are free, some are included in a parent act and are never billed twice, and a few are quoted rather than priced.

Read it the other way round when you are planning: it is also the clearest list of what the platform can actually do for you.

Time sheets

Every human intervention on your account, and how long it took

The ledger says what was billed. The Time sheets page says what was done: a reply to one of your tickets, a register searched, a contact hunted down, a letter written and posted — with the duration of each, grouped by the day it happened on and totalled per day.

Where the entries come from

  • Logged automatically as the work happens. A reply to one of your tickets is logged at ten minutes, an outbound letter at the standard time for its channel, and a manual act at the duration the catalogue gives it.
  • Logged from the steps of a demand. Settling a step on the request page — searching the registers, identifying the operator, recording an assessment — writes an entry at the usual duration for that kind of step. Going back and re-settling one never logs it a second time.
  • Corrected by our team afterwards. A default is a starting point, not a claim: a search that took an hour is put right by the analyst who ran it.
  • Marked To be confirmed when nobody has yet said the work was theirs. Those lines are visible on purpose — you can see what has been checked and what has not.

A cancelled entry is struck through rather than removed: it is part of the record of what happened, including the part that was corrected. An entry marked not charged is work done and not billed — onboarding, rework, goodwill.

Not every hour is the same hour

Most of what you will see here is an IP Defender analyst, and those lines carry no badge because that is the ordinary case. A line marked External IP attorney is not us: it is a qualified industrial-property attorney reading your case, which is a different piece of work at a different price — see asking an IP attorney. The badge is there so that counsel’s half-hour can be told apart from an analyst’s: counsel’s time is invoiced to you by the firm and never reaches your credit ledger, while ours does.

This page is a record, not a formNothing here can be edited from your side. If a line looks wrong, open a ticket naming the day and what you think it should say — a record worth keeping is one you can argue with.

Notifications

What the platform tells you, where, and how often

Two channels for the same events: in the portal, in the Notifications inbox, and by email. The inbox always receives everything your role can see; email is opt-in, category by category.

Each notification carries a link straight to the record it is about — the case, the letter, the ticket — so it opens where the decision is taken rather than on a list you then have to search.

Choosing what reaches your inbox

The categories are set on My account: new cases, new letters, letters awaiting your approval, replies received, comments on your records, tickets in your organization, and the daily and monthly digests. Turning a category off silences the email, never the in-portal entry.

The digests are a different thing from the alertsA digest is a summary sent on a schedule; a notification is one event as it happens. If you are receiving too much, the usual answer is to keep the digest and drop the per-event emails, not the reverse.

My account

You, your language, and your preferences

Your name, your email, the interface language (English or French, switchable at any moment from the flag in the header) and your notification categories. The theme — light or dark — follows your system and can be pinned either way.

The password and the sign-in method are handled by the platform’s own account screens, not from this page.

My organization

Your company, your plan, your brands and the people who work on them

The My organization page holds what everything else hangs off: the legal entity, the client reference, the active subscription and its plan, the monthly credit allowance, the brands under watch, and the owner names your registered trademarks are reconciled against.

It also lists the members: who has access, with what role, and whether an invitation is still pending. Everything any of them sees is scoped to this organization — there is no view in the platform that crosses from one client’s data to another’s.

Comments and team notes

A conversation attached to the record it is about

Every record in the platform — a case, an alert, a letter, a domain, a jurisdiction — carries a comment thread at the bottom of its sheet. It is the place for the sentence that explains a decision, and it stays with the record instead of in somebody’s mailbox.

  • Replying quotes the message you are answering, so a thread read six months later still says what it was about.
  • Mentioning a colleague notifies that person and nobody else. Without a mention, a comment notifies the whole organization — which is right for a decision and heavy for a note to one person.

The Team comments page gathers every thread in one place, newest first, so a week’s discussion can be caught up on without opening twenty records.

AI assistant

A question about your own data, answered from your own data

The AI assistant reads what you can read and nothing else — your cases, your alerts, your marks, your jurisdictions — and answers questions about them in ordinary language: what is open, what is overdue, what an action would cost, what the options are in a given country.

Most record sheets offer it four ready-made questions about that record, plus a free one. A conversation is personal: it belongs to you, not to your organization, and colleagues cannot read it.

It proposes; you decideThe assistant can prepare an action, but confirming it goes through the record’s own form, with the same wording, the same price and the same permission check as if you had started there. Nothing is carried out because it was suggested.

Exchanges are billable at one credit each — the same entry as any other act, visible in the ledger.

Typical journeys

Three common situations, end to end.

A counterfeit spotted on a marketplace

Open the alert
Check the URL and the seller. If it is an authorised reseller, create an exclusion and move on.
Enrich the page
You get the real product and the seller’s contact details — data the search engine does not provide.
Create the case
The initial analysis starts: capture, product, operator.
Take a screenshot
Before anything is sent. The page can disappear the moment you notify.
Qualify the legal grounds
The platform attaches the enforceable rights from your registered titles.
Create the “Marketplace takedown” action
The due date lines up with the platform’s usual response time.
Generate the letter, review it, approve it
Deal with the points flagged at generation before approving: afterwards the content is frozen.
Send and track
Tracking starts. Set a page monitor to be told when it comes down.

A suspect domain has just been registered

Open the domain alert
High score and registry action “added”: this is the one to handle first, before the site goes live.
Check the domain
Look at the record: holder, host, country. If it is yours, declare it as an official asset.
Create the case
Capture, archiving and the WHOIS record run automatically.
Create the “Domain dispute” action
Or a cease and desist to the holder if their details are identified.
Keep watching
A registered but inactive domain can stay that way for months. Page monitoring will tell you when it goes live.

The recipient replies

The reply lands in Exchanges
It is attached automatically to the original letter and to the case.
Reply from the thread
The subject, the recipient and the continuity of the conversation are preserved.
Verify the removal
A favourable reply is not a removal. Check the page, or let the monitor do it.
Update the outcome of the action
Content removed, account suspended, no response. That is the field feeding your success statistics.
Close the case
Pick the reason and leave a note: it will be read if the same operator shows up again.

Glossary

The words that structure the platform.

TermDefinition
AlertA page spotted by monitoring. Nothing is qualified yet.
Domain alertA newly registered domain name resembling a watched brand.
CaseA qualified infringement. The unit of work: everything attaches to it.
ProductThe same article grouped across every listing it appears in.
OperatorThe person or company behind the infringing listings.
ActionThe step taken on a case. It carries the due date and the outcome.
LetterThe document that gives an action its form. An action can have several.
TemplateThe wording a letter is built from, ours or your organization’s.
Merge fieldThe part of a template written in braces, replaced from the case at generation.
ExchangeOne row of the correspondence thread: a dispatch or a reply.
EvidenceA timestamped, sealed item attached to a case.
TyposquattingRegistering a domain close to a brand in order to capture its traffic.
ContactA name or an address behind an operator. Usable in a letter only once a person has verified it.
JurisdictionA country or a regional body, with its own register, its own office and its own law.
CreditThe unit a billable act is paid in. Granted monthly by your plan, topped up beyond it.
Ledger entryOne movement of credits. Append-only: a correction is a new entry, never a rewrite.
Time entryOne human intervention on your account, with its duration. Logged as the work happens, corrected afterwards.
OrganizationYour company as the platform holds it. Everything you can see is scoped to it.
Nice classThe international classification (1 to 45) of goods and services covered by a title.

Frequently asked questions

My scans are not bringing anything back.
Check in order: is the watch profile active, does it have keywords attached, and is its last run recent? The scan history tells you whether the run happened and what it produced. You can always start a search manually without waiting for the schedule.
Too many false positives.
Add negative keywords to the profile, and create exclusions straight from the alerts concerned — the value is pre-filled. Every rule you activate also re-evaluates the alerts already present, so the effect is immediate.
An alert is empty: no product, no seller.
The search engine only returns a title and a URL. Enrichment is what opens the page to extract the rest. If enrichment fails, the site is probably blocking automated access: the full analysis from the case is more robust.
Can I use my own wording instead of your templates?
Yes. On the Letter templates page, New template lets you write your own. It is shared with every member of your organization and with nobody outside it, and it then behaves exactly like ours: same generation button, same approval circuit, same PDF and delivery. If you want our legal team to review the wording before you rely on it, send it through a support ticket with the jurisdiction it must hold up in.
I cannot find the right action in the generation window.
The window searches your open enforcement actions as you type: try the case reference, a word from the case title, the brand or the type of action. Only actions that are neither cancelled nor archived can receive a letter — if nothing comes back, the action probably has to be created on the case first.
I made a mistake in an approved letter.
An approved letter can no longer be edited. Generate a new one on the same action: successive dispatches are kept and numbered, so the history stays readable.
My email came back as failed.
The exact reason is recorded on the exchange. Invalid address: correct it on the operator record and generate a new letter. Rejection by the recipient server: the “Resend” action retries the dispatch.
How do I know whether the page has been taken down?
Set a page monitor on the case. It re-checks the URL every week or every month and confirms removal after two consistent checks. Watch for the “silent” status: it flags a monitor that stopped without saying so.
What will this action cost me?
Every billable action shows its amount in the confirmation window, before you validate. The detail of each charge is available in the credit ledger, attached to the case concerned.
Why is a contact still “To be verified” after weeks?
Because verification is a human act and nothing schedules it on its own. A contact can only go into a formal letter once a person has confirmed it — a name attributed to the wrong individual in a cease and desist is a defamation risk. If one is holding up an action, say so in a ticket naming the contact: that is what moves it up the queue.
A contact has no name at all. Is that a bug?
No. A functional address (legal@, abuse@) never had a name, and a row collected from a legal notice page often carries only a phone number. Those are marked Further research is required: the address works, the person behind it is still unknown. Use the Data found filter to see only the contacts carrying what you need.
Do I hold a right in this country?
Open Search trademarks, type the name and pick the country: the left column is your own portfolio there, the right is what the official register answers. The Jurisdictions page tells you which office keeps that register and what the local law says.
The time sheet shows more time than I expected on a ticket.
Entries are logged as the work happens, at a default duration, and corrected by our team afterwards — a line marked To be confirmed has not been checked by anyone yet. If a corrected line still looks wrong, open a ticket naming the day: the sheet is a record, and a record worth keeping is one you can argue with.
Why does a case total in the ledger look too low?
Two thirds of the spend is booked against a product or an alert rather than against a case, because that is where the work happened — enrichment, searches, scans. Filtering the ledger by case shows the case’s own charges, not everything that led to it.
I am getting too many emails.
Email is opt-in, category by category, on My account. Turning a category off silences the email and never the in-portal entry, so nothing is lost from the Notifications inbox. The usual setting that works is to keep the daily digest and drop the per-event emails.
Can the AI assistant act on my behalf?
It can prepare an action, never carry one out. Confirming goes through the record’s own form, with the same wording, the same price and the same permission check as if you had started there. Conversations are personal: colleagues in your organization cannot read them.
A dashboard section shows an error.
This is usually a missing read permission on a field used for grouping. Report it through a ticket, stating the section and the page address: the diagnosis is immediate.
A question this guide does not answer? Open a support ticket from the Support module. Give the address of the page concerned — it makes the diagnosis immediate.
Open a support ticket