检测数据的保密与知识产权边界

结论：保密不是靠信任，是靠事先约定的范围和机制

把产品送到第三方检测，意味着把产品的实物、图纸、配方、工艺信息交出去。

对研发投入较大的产品，这件事需要认真对待。

但「保密」这个词太笼统，实际要明确的是四个问题：

哪些信息属于保密范围？ 不是所有信息都需要也都能保密。

实验室内部谁能接触？ 接触范围的控制。

样品和数据归谁、怎么处理？ 测试后的去向。

什么情况下可以披露？ 法定的例外情形。

这四个问题事先约定清楚，比事后依赖信任可靠。

涉及的信息类型

「委托关系本身」也可能是敏感信息 ——某企业在测某类产品，这个事实可能透露研发方向，所以委托方名单通常也在保密范围内。

实验室的保密机制

合同条款。 委托合同中的保密约定。

人员协议。 员工的保密义务。

接触控制。 样品和资料的接触范围限制。

区域管理。 试验区域的进入控制。

信息系统。 数据的访问权限控制。

记录管理。 原始记录的保存和调阅控制。

见证的限制。 其他委托方见证时的隔离。

「见证时的隔离」是容易被忽略的环节 ——一个委托方在现场见证时，可能看到其他委托方的样品和试验，这需要通过排期和区域安排来避免。

样品的处理

测试后的去向。 退回、留样、还是销毁。

留样的期限。 留多久、留在哪里。

破坏性试验的残件。 残件也含信息，处理方式要约定。

销毁的方式。 销毁是否需要见证或证明。

退回的责任。 退回过程中的损坏和丢失。

「破坏性试验的残件」常被忽略 ——断裂的车架、拆解的部件，这些残件仍然含有结构和材料信息，处理方式应当明确。

数据的归属与使用

检测数据的归属。 通常委托方拥有使用权。

实验室的保存义务。 出于质量体系要求需保存原始记录。

匿名使用。 实验室能否在匿名的前提下用于统计或研究。

案例的使用。 能否作为案例宣传，需要委托方同意。

数据的提供范围。 除报告外的原始数据是否提供。

「匿名统计使用」建议在合同中明确 ——实验室做行业分析或方法研究时可能需要汇总数据，如果不希望被使用，应当事先说明。

知识产权的边界

送检不转移知识产权。 产品的设计、专利、技术秘密仍属委托方。

检测方法的知识产权。 实验室自行开发的方法属实验室。

联合开发的情形。 如果涉及方法的共同开发，归属要事先约定。

报告的著作权。 报告文本的著作权通常属实验室，委托方有使用权。

改进建议的归属。 实验室提出的技术改进建议，归属可能需要约定。

「改进建议的归属」在深度合作中值得约定 ——如果实验室在检测中提出了有价值的技术改进方案，这个方案的归属和使用应当事先明确，避免后续争议。

法定的披露情形

保密义务有例外：

监管部门的依法调取。 监管机构依法要求提供。

司法程序。 法院或仲裁机构的要求。

安全事件。 涉及公共安全的重大问题。

认可机构的审核。 认可评审时的文件查阅（评审员同样有保密义务）。

这些例外是法定的，合同不能排除 ——但实验室应当在法律允许的范围内通知委托方。

委托方能做的

签保密协议。 在委托合同外单独签署，明确范围和期限。

限制提供的信息。 只提供检测必需的信息，配方和工艺细节如非必需可以不提供。

明确样品处理。 约定测试后的处理方式。

约定数据使用。 明确能否匿名使用、能否作案例。

软件的处理。 源代码通常不需要提供，功能验证可以用可执行版本。

「只提供必需的信息」是有效的保护 ——很多检测项目并不需要知道完整配方，提供必要的安全和相容性信息即可。

常见的准备不足

信息不全。 材料、工艺、使用环境的信息缺失，导致方案设计缺乏依据。

样品不具代表性。 试制样品或挑选样品，与量产状态有差距。

条件未明确。 测试条件没说清楚，数据的适用范围就不明确。

只看初始值。 忽略了环境和时间作用后的性能变化。

项目不完整。 遗漏了必要的项目，提交时才发现。

这五项在实际委托中出现频率较高，建议在项目启动时逐项确认，因为它们造成的返工成本远高于事前确认所花的时间。

数据的组织与保存

记录的完整性。 条件、方法、设备、样品状态、实测值。

可追溯性。 数据与样品批次、生产批次的关联。

保存期限。 覆盖产品的生命周期。

检索的便利。 需要时能快速定位。

版本的管理。 数据更新时的版本控制。

建议建立统一的数据台账，记录每组数据的来源、条件、适用范围和有效期。数据积累起来之后，后续的产品开发和变更评估都能受益。

与整体工作的衔接

这部分工作不是孤立的，它与几项内容相关：

与设计的衔接。 数据是设计决策的依据，也是设计验证的证据。

与风险管理的衔接。 识别出的风险点应当有对应的验证。

与变更管理的衔接。 变更时判断是否需要重新验证。

与生产控制的衔接。 关键参数的控制限值来自验证数据。

与售后的衔接。 失效分析需要原始数据作为对照。

建议在项目规划时就把这些衔接关系理清楚，避免各环节各做各的、数据无法互相支撑。

我们的做法

委托合同中包含保密条款，需要单独签署保密协议的，我们配合签署。

样品的处理方式我们在受理时确认 ——退回、留样还是销毁，包括破坏性试验的残件，按委托方的要求执行并记录。

案例宣传我们征得委托方同意后才做，未经同意不使用委托方的名称、产品信息和数据。

委托方名单我们不对外提供，其他委托方现场见证时，我们通过排期和区域安排避免交叉。

如果你对送检涉及的保密事项有具体要求，可以在委托前提出一起约定，或者直接联系：132 4819 8029。流程见检测流程，送检要求见送检要求，其他问题见常见问题。

English version

Conclusion. Sending a product to a third-party laboratory means handing over the physical product together with drawings, formulations and process information. For products carrying substantial development investment, this deserves serious attention. The word confidentiality is too broad, however, and four questions need settling. Which information falls within the confidential scope, since not all information needs or can be kept confidential. Who within the laboratory may have access, meaning control of the access circle. Who owns samples and data and how they are disposed of after testing. And in what circumstances disclosure is permitted, meaning the statutory exceptions. Settling these four in advance is more reliable than relying on trust afterwards.

Types of information involved. The physical product is highly sensitive, being open to dismantling and analysis. Drawings and structure are highly sensitive as core design information. Material formulations are highly sensitive and frequently trade secrets. Process parameters are highly sensitive as the key to performance. Software and source code are highly sensitive and generally not supplied. Test data are moderately sensitive as information about performance levels. The commissioning relationship is moderately sensitive as commercial information. And standards and methods are low sensitivity, being public. The commissioning relationship itself may be sensitive: the fact that a company is testing a class of product can reveal a development direction, so client lists generally fall within the confidential scope too.

The laboratory's mechanisms. Contract clauses covering confidentiality in the commissioning agreement. Personnel agreements covering employees' obligations. Access control limiting who may handle samples and documents. Area management controlling entry to test areas. Information systems controlling data access rights. Records management controlling retention and retrieval of raw records. And witnessing restrictions isolating one client from another. Isolation during witnessing is readily overlooked: a client witnessing on site may see other clients' samples and tests, which scheduling and area arrangements must prevent.

Disposal of samples. Decide their destination after testing among return, retention and destruction. Set the retention period and location. Address the remains of destructive testing, which carry information too. Specify the method of destruction and whether witnessing or a certificate is required. And allocate responsibility for damage or loss in return shipment. The remains of destructive testing are commonly overlooked: fractured frames and dismantled components still carry structural and material information, and their disposal should be specified.

Ownership and use of data. Test data ownership generally gives the client the right of use. The laboratory has a retention obligation, required by its quality system to keep raw records. Anonymised use covers whether the laboratory may use data for statistics or research without identification. Case study use requires the client's agreement. And the scope of data provided covers whether raw data beyond the report are supplied. Anonymised statistical use is worth specifying in the contract: laboratories conducting sector analysis or method research may need aggregated data, and a client who does not want theirs used should say so in advance.

Intellectual property boundaries. Submitting a sample does not transfer intellectual property, and the product's design, patents and trade secrets remain the client's. Intellectual property in methods the laboratory develops belongs to the laboratory. Joint development of methods requires ownership agreed in advance. Copyright in the report text generally rests with the laboratory, with the client holding rights of use. And ownership of improvement suggestions the laboratory offers may need agreeing. Ownership of improvement suggestions is worth agreeing in deeper collaborations: where a laboratory proposes a valuable technical improvement during testing, ownership and use should be settled in advance to avoid later dispute.

Statutory disclosure. Confidentiality obligations carry exceptions. Lawful demands from regulators. Judicial or arbitral requirements. Safety incidents involving significant public safety concerns. And accreditation body assessment, where assessors examine documents under their own confidentiality obligations. These exceptions are statutory and cannot be excluded by contract, though the laboratory should notify the client so far as the law permits.

What clients can do. Sign a confidentiality agreement separately from the commissioning contract, defining scope and duration. Limit the information supplied to what testing requires, withholding formulation and process detail where it is not needed. Specify sample disposal after testing. Agree data use, covering anonymised use and case studies. And handle software carefully, since source code is generally unnecessary and functional verification can use executables. Supplying only what is necessary is effective protection: many test items do not require a complete formulation, and the necessary safety and compatibility information suffices.

How we handle it. Our commissioning contract includes confidentiality clauses, and we will sign a separate confidentiality agreement where one is wanted. We confirm sample disposal when accepting work, covering return, retention or destruction including the remains of destructive testing, and act and record accordingly. We use case studies only with the client's agreement, and without it we do not use client names, product information or data. And we do not release our client list, using scheduling and area arrangements to prevent overlap when another client witnesses on site.

If you have specific confidentiality requirements for submitted work, raise them before commissioning and we will agree them. Phone or WeChat: +86 132 4819 8029.