// Trust & Security Report

    Cambia (The Lens) logo

    Cambia (The Lens)

    Patent and scholarly research search, analysis, and discovery platform. Integrates 171.8M patents, 315M+ scholarly works, and 560.9M biological sequences with advanced search, visualization, portfolio management, and institutional toolkits for research institutions, academics, and patent professionals.

    Certifications held

    1

    Maturity

    Enterprise

    Trains on your data

    No

    Trust center

    No

    // Certification ledger

    Each held certification is backed by a verbatim quote from the vendor's own trust or security page. “Not confirmed” means we could not verify it publicly, not that the vendor lacks it.

    GDPR
    HELD

    Users can 'request access to and rectification or erasure of your Personal Data' under European regulations. Data Protection Officer: dpo@lens.org. Third-party security provider is GDPR compliant.

    Verify on about.lens.org
    > Show 10 unconfirmed / not-held certifications
    SOC 2 Type 1
    NOT CONFIRMED

    No public evidence. Site-wide search of lens.org and privacy policy yields no mention of SOC 2 certification.

    source: about.lens.org
    SOC 2 Type 2
    NOT CONFIRMED

    No public evidence on lens.org domains.

    source: about.lens.org
    ISO 27001
    NOT CONFIRMED

    No public evidence on lens.org domains.

    source: about.lens.org
    ISO 27017 (Cloud Security)
    NOT CONFIRMED

    No public evidence. Platform uses AWS but does not claim ISO 27017 certification.

    source: about.lens.org
    ISO 27018 (Cloud PII Protection)
    NOT CONFIRMED

    No public evidence on lens.org domains.

    source: about.lens.org
    ISO 27701 (Privacy Management)
    NOT CONFIRMED

    No public evidence. GDPR rights are documented but ISO 27701 certification is not claimed.

    source: about.lens.org
    ISO 42001 (AI Management)
    NOT CONFIRMED

    No public evidence. Product uses ML with Microsoft Academic for search improvement but does not claim AI governance certification.

    source: about.lens.org
    HIPAA
    NOT CONFIRMED

    No public evidence. Product is designed for patent/scholarly research, not healthcare data.

    source: about.lens.org
    PCI DSS
    NOT CONFIRMED

    No public evidence. Payment processing through Paddle (third-party, which is GDPR Ready), but PCI DSS not mentioned.

    source: about.lens.org
    FedRAMP
    NOT CONFIRMED

    No public evidence. Not targeted at US federal agencies.

    source: about.lens.org

    // Privacy & AI training

    Trains on customer data

    No

    Data processing agreement

    Offered

    Data region

    AWS global infrastructure (unspecified region, GDPR compliant)

    Platform uses machine learning in collaboration with Microsoft Academic to improve search algorithms and metadata quality. Weekly web scans with algorithm improvements informed by community feedback. Training is NOT on customer data or user queries; it operates on open patent and scholarly data sources.

    // Security controls

    Encryption in Transit

    HTTPS enabled. HTTP Strict Transport Security (HSTS) implemented to prevent man-in-the-middle attacks.

    about.lens.org

    Encryption at Rest

    No explicit mention. Third-party hosting on AWS (which provides encryption as a service).

    about.lens.org

    Bot Protection

    Cloudflare Turnstile for bot and DDoS protection on scholarly search endpoints. Cloudflare service is GDPR compliant.

    about.lens.org

    Data Retention (Web Logs)

    Web server logs deleted every 4 weeks. IP addresses not stored in application databases or analytics servers.

    about.lens.org

    Data Retention (Guest Accounts)

    Anonymous/guest user accounts deleted within 48 hours.

    about.lens.org

    Authentication

    Standard account-based authentication. Employees use Google Account + YubiKey hardware security keys for 2FA.

    about.lens.org

    Dependency Security

    Dependabot used for automated dependency scanning and updates.

    about.lens.org

    Content Security Policy

    Updated CSP to prevent clickjacking attacks.

    about.lens.org

    Browser Storage

    Local and Session Storage restricted to user's browser. No server-side exchange of stored data.

    about.lens.org

    Advertising & Tracking

    No ads. No third-party surveillance software. No tracking of user search queries or activity.

    about.lens.org

    // Products & data scope

    Patent Search & AnalysisSearch & Discovery

    data: 171.8M patents from 95+ jurisdictions, 96.5M patent families, 2.6B citations

    Advanced boolean search, structured search, biological sequence search, classification search, filtering, sorting, visualization

    Scholarly Works Search & AnalysisSearch & Discovery

    data: 315M+ scholarly works, 91.7M open access, 47.7M authors, 510.2M citations

    Full-text and metadata search, citation mapping, author discovery, influence measurement

    Collections & PortfoliosCollaboration & Analysis

    data: User-created collections of patents and scholarly works

    Create, annotate, share, export collections; portfolio management

    Biological SequencesSearch & Discovery

    data: 560.9M sequences disclosed in patents

    Search, analyze, share biological sequences; unique capability

    Profiles & PortfoliosResearcher Profiles

    data: Researcher/inventor profiles linked to patents and publications

    Public profiles showing research output, collaborators, CV modules

    Institutional Toolkit (ITK)Enterprise

    data: Full platform access for institutions, advanced features

    Subscription-based for universities, research institutes, corporations. Includes bulk export, API access, custom analytics

    Public APIIntegration

    data: Programmatic access to patent and scholarly data

    Available for commercial and institutional users. Documented at https://docs.api.lens.org/

    Collective Action Project (CAP)Public Good Initiative

    data: Free/subsidized access for research on global challenges

    Lens Equitable Access Program (LEAP) ensures affordability globally

    // At a glance

    Pricing model

    Freemium (open public access), with optional subscriptions for institutions and commercial use. Equitable Access Program (LEAP) for non-profit/developing markets.

    Self-hostable

    No

    // How we verified this

    Every certification marked HELD is confirmed against a verbatim quote on Cambia (The Lens)'s own trust, security, or privacy pages. We reject certifications claimed only on third-party aggregators, on a cloud host's behalf, or by a similarly named company.

    Last verified 2026-07-07. Compliance changes over time. Always confirm directly with the vendor before relying on any certification for a purchasing or compliance decision.

    about.lens.org

    > Browse all vendor trust reports