Hacker News (curated)new | past | comments | ask | show | jobs| show hidden

I'd highly recommend you revisit your protection of customer's IP. Considering that you require source files (not just the industry standard gerbers), your legal terms are very unfavorable to customers. This makes me uncomfortable because it makes my IP much easier to leak. As written, I cannot justify the risks given your agreement.

Nothing in the legal terms explicitly prevents your employees from using my designs for other purposes. If you leak my IP and I find out 13 months later, your terms prevent me from seeking damages because you only cover 12 months from manufacturing.

I like that you have an NDA that I can opt in to, but you should be offering the NDA by default when I upload the files. I should not have to go looking for it in your documentation.

Edit: I realize that there is also limited protection and a lot of risk using a Chinese manufacturer. But requiring source files makes it much, much, easier to look at my design, recognize what it's for, and reproduce it, or at least copy the innovative parts of my design.



You can upload Gerbers/ODB++ if you like. We also sign custom NDA's. We count many of the worlds largest corporations as customers so this is pretty standard.

Would you address other concerns voiced above? They are pretty serious points or allegations. Also, a PCB sourcing should not require a custom NDA when the selling point is convenience, legal protection, and speed vis-a-vis overseas sourcing.

Then there's either a usability issue or a bug. I uploaded gerbers but it wouldn't let me continue unless I uploaded schematics and board files.

And why should I have to sign an NDA? You aren't giving me any confidential data, I am giving it to you.


>> We also sign custom NDA's

> And why should I have to sign an NDA?

I think you misunderstood?


What did I misunderstand? Their documentation (https://docs.circuithub.com/importing-a-project/files-requir...) says:

---

For additional legal protection of your intellectual property please sign our NDA.

---

To make it worse, you can't even read what their NDA says without signing up with your email address on a third party site.


I second the use of NDA/privacy gaurantee as default. It shouldn't be opt-in with friction. Of course if I want to use a custom/overriding NDA then i'm happy to contact you to review.

Her's what the documentation says:

---

In order to receive a quote on CircuitHub, you will need to upload the original design files from your EDA tool, or an export that carries the same data. This allows us to provide instant quotes and automate the manufacturing process to lower lead times and cost. Currently, our platform works with Altium, KiCad and Fusion 360 files, and with ODB++ and IPC-2581 exports from any design tool, including Cadence Allegro and OrCAD.

We do not accept Gerber files on their own because they do not contain all of the design and assembly data required by our automated process. We do use your Gerber files when you upload them together with an ODB++ or IPC-2581 export, or with Fusion 360's EAGLE exports, which describe the parts.

---

Other vendors don't require this. They just need the gerbers, BOM, and CPL files. That's way different than source files or ODB++/IPC-2581 exports, which is basically the same thing as source.


IPC-2581 is the future.

Good riddance to the compatibly hellhole of 30 different flavors of Gerber/Gerberx/NCdrill

EDIT: haven't even mentioned everyone's different goofball CSV BOMs


It’s several steps up from Chinese manufacturers already however where they will almost certainly use your design for something else if it suits them and you have no protections.

I agree up to a point. It's like the difference in giving someone binary or source code. Yes, someone can reverse engineer gerbers into a schematic, but that's a lot different than handing over the schematic, which includes more information about the design than the gerbers do. It's much easier to look at a schematic and say "oh, that's a circuit I want to use" than it is to look at gerber files and think that.

I have some level of confidence that JLC is going to protect my IP. They are big and if someone's IP leaked it could be devastating to their business. Their legal agreements are a lot more detailed and favorable than what's currently on circuithub.


Pretty much any new product gets a Chinese copy within a year. How are you so confident JLC is not the source of atleast some of these. Also there is no other alternative so they have that security.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact | github