Robotics and Autonomy IP Checklist: Component and Stack Mapping, Training Data Provenance, Safety Documentation, Integrator Terms, and Field Data Rights

By ·

This checklist audits the intellectual property position of a robotics or autonomous systems business in the order the questions arise. It begins with the stack map, because no filing or protection decision can be made sensibly until each layer has a named owner and a named protection mode. It then works through the filing programme, the training data register, model weight controls, the safety documentation split, the fleet data clause, the integrator relationship, the simulation environment, the disclosure and export calendar, and the diligence file. Gate items mark the points at which work should stop until a specific artefact exists.

IP and Technology > Information Technology | Checklist | Published 15 January 2025 - Updated 28 July 2026 | Casey Scott McKay - marksy.us

Summary. This checklist audits the IP position of a robotics or autonomous systems business in the order the questions arise. It begins with the stack map, because no protection decision can be made sensibly until each layer has a named owner and protection mode. It then works through the filing programme, the training data register, model weight controls, the safety documentation split, the fleet data clause, the integrator relationship, the simulation environment, the disclosure and export calendar, and the diligence file. Gate items mark where work should stop until a specific artefact exists.

Keywords: robotics checklist · stack mapping · training data register · model weights control · safety case split · integrator work product · field data categories · teleoperation retention · simulation provenance · export classification · single actor claims · eligibility screening · demonstration discipline · aftermarket position · diligence file


How to use this checklist

| Phase | What it produces | Who runs it | Gate | |---|---|---|---| | 1. Stack map | One table naming every layer, owner, and protection mode | Counsel with engineering leads | Map exists and engineering has corrected it | | 2. Filing programme | A ranked list of what to file and how to draft it | Patent counsel | Nothing filed before the map | | 3. Training data | A register with one row per dataset | ML lead and counsel | No training run without a row | | 4. Model weights | Access controls plus a five-point contract wrapper | Security and counsel | No external copy without terms | | 5. Safety documentation | Two documents, distributed differently | Safety lead and counsel | Design rationale never sent unrestricted | | 6. Fleet data | A three-category clause | Commercial and counsel | Clause agreed before enterprise deals | | 7. Integrators | Work product, reporting, brand, and restriction terms | Partnerships and counsel | Integration work product resolved | | 8. Simulation | Provenance audit and access controls | Engineering and counsel | Bill of materials exists | | 9. Disclosure | A calendar and an export classification | Counsel | No public demonstration without review | | 10. Diligence | Ten artefacts an investor will ask for | Counsel | All ten exist as documents |

The matter. A warehouse robotics company has sixty machines deployed across six customers, three integrator partners, four patent applications all directed to the gripper, a perception stack the founders describe as the crown jewel, and a Series B process starting in five months. Nobody can name the datasets used to train the shipped model. The safety file has been sent in full to nine organisations. The integrator agreements assign integration work product to the integrators.


Phase 1. Build the stack map


Layer-by-layer notes for the map

Mechanical platform. Usually the best-documented layer and the least defensible commercially, because there are many ways to build a chassis or a gripper. File on it anyway: it produces claims that read on articles a competitor sells and can be examined on a bench.

Sensors. Bought, almost always. Record the supplier, the purchase terms, the field-of-use restrictions, and whether the supplier has any right to the buyer's integration work. Note any supplier that is single-sourced and what qualifying an alternative would cost, because that number is the supplier's leverage in every future negotiation.

Low-level control and calibration. The layer most often unassigned to anyone. Ask specifically: who established the relationship between sensor frames and actuator frames, who tuned the loops, who wrote the procedure that a technician follows in the field. Those people are inventors and their work is patentable.

Safety architecture. Redundant sensing, envelope enforcement, safe stopping, fault detection and response. Two properties make this layer disproportionately valuable: it is technical enough to survive eligibility, and a competitor cannot design around it without changing what it certifies.

Perception. Where founders locate the value and where patent law helps least. Map what is model-based and what is engineered, because the engineered parts — preprocessing, geometric reasoning, sensor fusion structure — are often patentable even where the learned parts are not.

Planning and decision. Same analysis. The scheduling, arbitration, and fallback logic are frequently more claimable than the learned policy.

Training and simulation apparatus. Datasets, labelling pipeline, simulation environments, evaluation harnesses. Almost never on a schedule and almost always valuable.

Fleet management software. Where the recurring revenue lives, where the customer data flows, and where the terms of service govern more than the patent portfolio does.

Integration interfaces. See Phase 7. Record who wrote each one and what the governing agreement says about it.

Brand. Machine names, model designations, the company mark, and the domain portfolio. Cheap to protect and routinely neglected until a competitor files first.


Phase 2. Set the filing programme


Phase 3. Build the training data register


Reading a training data licence

Six questions decide whether a dataset can be used, and a register row that does not answer all six is incomplete.

Is commercial use permitted at all? Research-only and non-commercial terms are the most common blocker, and they appear on datasets that everyone in the field uses, which creates a false sense of safety. Widespread breach is not a defence.

Is machine learning use contemplated? Older licences predate the practice and say nothing. Silence is not permission where the licence grants specified rights and reserves the rest, and it is closer to permission where the licence grants broad use subject to named restrictions. Read which structure you have.

Are derivative models permitted, and are they encumbered? Some terms purport to attach conditions to anything trained on the data — attribution, share-alike, or field restrictions. A model carrying such an encumbrance is a model whose commercial deployment may breach the licence.

Does the licence survive? Terms that terminate on the licensor's insolvency, on acquisition, or at will leave a shipped model resting on a licence that may not exist next year.

Who granted it, and did they have the right? Aggregated datasets frequently combine material the aggregator did not own. A licence from someone without rights transfers nothing, and the register should record whether the chain was checked.

What are the attribution and notice duties? Cheap to comply with and embarrassing to breach, and several widely used corpora impose them.


Phase 4. Control the model weights


Phase 5. Split the safety documentation


Phase 6. Rewrite the fleet data clause into three categories


What the deployed fleet is telling you


Phase 7. Fix the integrator relationship


Phase 8. Audit the simulation environment


Standards exposure, in one pass

Aftermarket position, decided deliberately


Phase 9. Run the disclosure and export calendar


Phase 10. Set the teleoperation retention policy


Phase 11. Employment and departure controls


Phase 12. Assemble the diligence file

A note on order

The phases are ordered by dependency, not by importance. The stack map comes first because every later decision references it — a filing programme without it aims at whichever layer the founders described most fluently, and a diligence file without it is a list of assertions.

The training register comes early because remediation takes engineering time rather than legal time. A dataset that has to be removed means a retraining run, an evaluation cycle, and a release, and none of those compresses. Discovering the problem in month one of a five-month process is manageable; discovering it in month four is not.

The safety split comes before the integrator work because the document that has already been distributed cannot be recalled, and every week of delay adds recipients. The fleet data clause comes before the first enterprise negotiation for the same reason in reverse: a position conceded once becomes the precedent every later customer cites.

The integrator conversations come late in the sequence and take longest, because they are commercial rather than legal. A vendor asking three partners to renegotiate the term that gives those partners their leverage is asking for something, and the ask needs a trade. Starting the conversation in month three of a five-month process means it is underway rather than concluded when diligence begins, which is an acceptable answer to an investor who wants to see that the problem is identified.

The diligence file comes last because it is a compilation. Every artefact in it is the output of an earlier phase.


Outcome. A business that has run this checklist can say which layer of its system carries the value, whether the model it ships was trained on material it was licensed to use, who owns the interface that makes the product deployable, and whether its most detailed technical description is sitting unrestricted in nine other organisations. Those four answers determine what the company is worth, and none of them appears in the technical file.


Key Authorities at a Glance

| Authority | What it settles | Phase | |---|---|---| | 35 U.S.C. § 101 | Patentable subject matter | 2 | | Alice Corp. v. CLS Bank International | Two-step abstract idea framework | 2 | | Diamond v. Diehr | A process controlling a physical operation is eligible | 2 | | Bilski v. Kappos | Machine-or-transformation is a clue, not the test | 2 | | 35 U.S.C. § 112 | Written description and enablement | 2 | | Amgen Inc. v. Sanofi | Functional breadth must be enabled | 2 | | Limelight Networks, Inc. v. Akamai Technologies, Inc. | Single-actor requirement for direct infringement | 2 | | 35 U.S.C. § 271 | Acts of infringement | 2, 7 | | Thaler v. Vidal | An inventor must be a natural person | 2, 11 | | 35 U.S.C. § 115 | Inventor's oath or declaration | 2, 11 | | 18 U.S.C. § 1839 | Reasonable measures element of trade secret status | 4, 7, 8, 11 | | Kewanee Oil Co. v. Bicron Corp. | Trade secret law coexists with patent law | 4 | | Feist Publications, Inc. v. Rural Telephone Service Co. | Facts are unprotectable | 3 | | 17 U.S.C. § 1201 | Circumvention and triennial exemptions | 4 | | 35 U.S.C. § 102 | Novelty, public use, grace period | 9 | | 35 U.S.C. § 184 and § 185 | Foreign filing licence and invalidity | 9 | | 35 U.S.C. § 181 | Secrecy orders | 9 | | 35 U.S.C. § 202 | Bayh-Dole obligations | 12 | | Aro Manufacturing Co. v. Convertible Top Replacement Co. | Repair permitted, reconstruction not | Aftermarket position | | Impression Products, Inc. v. Lexmark International, Inc. | Authorised sale exhausts the patent right | Aftermarket position |


The five things people get wrong

One: filing on the capability instead of the mechanism. Founders describe what the machine does, and the instinct is to claim that. A claim to identifying objects and selecting actions is a claim to gathering information, analysing it, and acting — which is where the Alice analysis ends badly. The claims that survive recite specific technical mechanisms, and the claims that are worth having recite mechanisms a competitor cannot avoid: calibration, safety architecture, and the interface that makes the product deployable.

Two: not knowing what the model was trained on. Almost no robotics company can produce a complete dataset list on request, and almost every register that gets built surfaces at least one dataset whose terms prohibit what the company is doing. The finding is cheap to remediate at the time of discovery — a retraining run — and expensive to remediate during diligence, where it becomes a price adjustment. Build the register before someone else asks for it.

Three: sending the whole safety file. The safety documentation is written by safety engineers for safety engineers, and it is complete by design. Sent in full to every customer and integrator, it distributes the most detailed description of the system that exists, without terms, to organisations that will keep it after the relationship ends. Split it: a behavioural safety case that goes everywhere, and a design rationale that goes nowhere without specific terms and a register entry.

Four: letting the integrator own the integration. The interface between the robot and the customer's systems is what makes the machine sellable, and it is built by a partner who owns it absent a term to the contrary. Three years later the partner has a generic interface, a qualified alternative machine, and no reason to keep buying yours. This is the single most consequential term in a robotics company's contract stack and it is routinely left to the partner's template.

Five: treating the fleet data clause as boilerplate. Data from deployed machines is what improves the next model, and the clause that governs it is usually copied from a software agreement that never contemplated a camera in a warehouse. Three categories fix it — operational data conceded, machine data taken broadly with survival, derived models owned outright — and the fix has to happen before the first enterprise negotiation, because a customer who has been given ownership once will expect it again.


Related Documents

Articles

Guides

Checklists

Toolkits


This checklist is general information about intellectual property practice, not legal advice, and it does not create a lawyer-client relationship. Marksy is not a law firm. Robotics and autonomous systems programmes engage patent, trade secret, contract, product safety, export control, and data protection law at once, and the correct answer depends on the architecture, the sector, and the jurisdictions in which the machines operate. Consult qualified counsel before acting.

Read this article on Marksy