What buyers should verify first
Protecting CNC intellectual property starts by limiting what each supplier receives and defining permitted use in a China-appropriate contract. The practical risks are full assemblies, customer identities, bills of materials, end-use details and proprietary process knowledge.
| Review area | What good control looks like | Buyer action |
|---|---|---|
| Before RFQ | Share a simplified or redacted package where possible | Reduce exposure |
| Contract | Define ownership, permitted use, confidentiality and remedies | Use qualified counsel |
| Access | Named recipients, controlled folders and expiry | Log downloads |
| Production | No undisclosed subcontracting or extra parts | Written approval |
| Closure | Return/destruction confirmation and archive rules | Document completion |
1. Classify what is truly sensitive
Separate the geometry required for manufacture from full assemblies, customer names, bills of materials, end-use details and unrelated process know-how. For a machined shaft, release the shaft geometry, material and necessary mating interfaces without the full motor assembly or customer roadmap. Remove hidden CAD layers and properties that identify unrelated customers. Preserve enough information for safe manufacturing and inspection; excessive redaction can hide a functional requirement.
2. Use jurisdiction-aware agreements
An NDA copied from another country may be difficult to enforce. For important IP, engage counsel familiar with the relevant Chinese entity and dispute mechanism. Define the covered drawings, models, samples and process know-how, plus permitted quotation and manufacturing use. Address subcontractor access, copying, return or destruction, retention exceptions and ownership of project work. Have qualified counsel assess the governing law, forum and available remedies for the actual contracting entity.
3. Control the digital trail
Use named accounts, permissions, watermarks or project IDs, download logs, expiration and a single approved revision source. Avoid uncontrolled email chains. Send revision C through the same controlled release channel that formally withdraws revision B. Ask the supplier to acknowledge the change and identify work already in process. Watermarks identify a copy but do not prevent downloading or substitute for recipient-level permissions.
4. Control subcontractors and samples
State whether external processors can see the drawing, whether photos are allowed and how rejected, setup and excess parts are handled. A finishing supplier may need masking zones and alloy information without receiving the full assembly model. Require named approval before that limited package is transferred. Include setup pieces and rejected parts in the disposition procedure so confidential geometry does not leave through scrap or promotional photographs.
5. Make security auditable
Ask for access records, employee confidentiality practice, visitor/photo rules, backup handling and a named incident contact. Test the procedure by asking who can retrieve a closed project's files and how an employee's access is removed. Review a redacted access record and the response plan for an accidental disclosure. Keep contract and release records together so an incident can be reconstructed without relying on memory.
What the confidentiality agreement should cover
- A precise definition of confidential drawings, models, specifications, samples and commercial information
- Permitted use limited to quotation and manufacture of the named project
- Restrictions on copying, reverse engineering and disclosure
- Written approval before any subcontractor receives controlled files
- Equivalent confidentiality obligations for approved subcontractors
- Return or verified destruction of files, samples, scrap and excess parts
- Ownership of tooling, programs and project-specific work product
- Governing law, dispute route and practical remedies reviewed by qualified counsel
Share the minimum viable manufacturing package
A shaft supplier may need the shaft model, drawing, material and mating interface, but not the complete motor assembly, customer name or product roadmap. Use revision-controlled filenames, watermark view-only quotation files when practical and release production data only after approval. Keep an access log so withdrawn revisions and subcontractor transfers can be traced.
Practical buyer scenario
A motor housing supplier may need interface dimensions and tolerances but not the complete rotor design or customer program name. Split the package around manufacturing need.
Topic-specific review checklist
- Classify files by quotation, production and restricted use
- Remove unrelated assemblies, customer names and BOM data
- Use revision-controlled filenames and transfer records
- Approve subcontractors before file disclosure
- Define return, deletion and scrap handling
- Confirm tooling and program ownership in writing
Frequently asked questions
Is an NDA enough?
No. It is one layer alongside selective disclosure, access control, supplier verification and evidence retention.
Should every drawing be watermarked?
Project IDs and controlled copies help investigation, but do not replace contractual or technical controls.
Can I prohibit all subcontracting?
Yes if practical, or require named approved processors under equivalent confidentiality terms.
When should I involve a lawyer?
Before disclosing high-value IP or signing a cross-border agreement with meaningful enforcement risk.
Sources and further reading
Discuss this drawing requirement with WEKO before releasing material or committing the production route.
