The situation
A consumer goods client is preparing a new product line. The marketing team has narrowed the name to three candidates and sends the firm a brief: the names, the product categories, the target markets, and a launch date nine months out. A clearance request lands with a trademark agent. To move quickly, someone on the team pastes the brief into a chatbot and asks it to brainstorm similar existing marks, flag descriptiveness problems, and suggest goods and services wording.
Each part of that prompt looks harmless on its own. Together, they describe a brand strategy that the client has not announced and has not yet protected.
What the rules actually say
No Canadian regulator has issued AI-specific rules for clearance work. The general duties apply, and the structure of Canadian trademark law explains why the pre-filing window matters.
Registration no longer requires use. Since the amendments that came into force on June 17, 2019, a Canadian application no longer needs a filing basis of use or proposed use, and no declaration of use is required before registration, as CIPO explains. Anyone can file for a mark, whether or not they have used it.
Entitlement turns on who got there first. Under section 16 of the Trademarks Act, an applicant is entitled to registration unless, at the earlier of its filing date or its first use in Canada, the mark was confusing with a mark another person had already used or made known in Canada, or had already applied for. In practice, the first person to file or use a confusing mark is generally in the stronger position. A client that has chosen a name but not yet filed has no registration to rely on.
Bad faith is a remedy, not a shield. Section 38(2) lets an opponent argue that an application was filed in bad faith, and section 18 makes bad faith a ground of invalidity. These tools matter, but they require evidence, time, and money, and they come into play only after someone else has already filed.
Confidentiality and privilege. Trademark agents have statutory privilege under section 51.13 for communications with clients that are intended to be confidential and made to seek or give advice on protecting a trademark. Lawyers owe confidentiality under their law society's rules. Both depend on the firm actually keeping the information confidential. The privilege guide for patent and trademark agents covers how AI prompts interact with that requirement.
Filing ends the secrecy. Once CIPO assigns a filing date, the application is entered in the Canadian Trademarks Database. That is the moment a client chooses to make the mark public. Before it, disclosure is the firm's to control.
Why policies and bans fall short
The real exposure is not the brand name alone. A single invented word typed into a search box reveals little. The risk grows when the name travels with the launch date, product categories, markets, and the rejected alternatives: that is competitive intelligence, and it is exactly what a helpful AI prompt tends to include, because the tool gives better answers with more context.
Policies usually say "do not share confidential client information with AI tools." A busy agent may not think of a working brand name as confidential in the same way as a financial statement. And a ban tends to push the work onto personal accounts. LayerX reported in 2025 that 71% of generative AI connections use personal, non-corporate accounts, which the firm cannot see or govern. Once a prompt is submitted, it cannot be recalled; it is subject to the provider's terms, which can permit retention and, depending on the account, use for training. For a plain explanation of those terms, see does ChatGPT train on company data.
What a practical control looks like
- Treat unannounced marks as restricted data. Put candidate names, launch timing, target markets, and rejected alternatives in the same confidentiality tier as other unreleased client information until filing.
- Separate the search from the strategy. If an approved AI tool is used for descriptiveness or goods and services drafting, give it only what the task needs, not the full launch brief.
- Use sanctioned tools only. Pick an enterprise AI tool whose terms the firm has reviewed, and make clear that personal accounts are off limits for clearance work.
- File promptly once cleared. The shortest pre-filing window is the smallest exposure. Talk to the client about filing as soon as a candidate is chosen.
- Have an incident path. If an unannounced mark reaches an unapproved tool, the responsible agent should know quickly and consider, with the client, whether to accelerate filing.
- Tell clients how you handle it. Brand teams increasingly ask outside counsel about AI use. A clear answer is part of the service.
Sanitized Ai is a browser extension that works at the moment of submission. When a prompt or file upload contains client names, deal terms, product details, or other sensitive data, it redacts or blocks that content before it reaches the AI tool and tells the person, in plain language, what was flagged and why. Firms can set policies for the categories of information they treat as restricted.
Administrators get a dashboard of flagged-event metadata (which tool, what type of data, which policy, when) and never see prompt content. That gives a managing partner an audit-ready record that the firm took reasonable steps to keep client brand strategy confidential, without reading anyone's prompts. More on how this fits a firm's duties is on the law firms page.