Mexico Patent Law for Software Startups: LFPPI and IMPI Strategy

Mexico Patent Law for Software Startups

Mexico's intellectual property regime for software combines a restrictive approach to pure software patents with a pragmatic framework for computer-implemented inventions — making it one of the most nuanced patent law environments in Latin America. For US and EU startups expanding into Mexico, and for Mexican startups raising international capital, understanding the boundaries of software patent protection is essential for accurate IP valuation and defensible due diligence.

The primary statute is the Ley Federal de Protección a la Propiedad Industrial (LFPPI), enacted in 2020 to replace the former Industrial Property Law. The LFPPI, administered by the Instituto Mexicano de la Propiedad Industrial (IMPI), governs patents, trademarks, trade secrets, and industrial designs in Mexico. IMPI's guidelines and examination practice determine what constitutes a patentable computer-implemented invention versus an unpatentable abstract software idea.

What Is Patentable in Mexico?

Article 47 of the LFPPI excludes several categories of subject matter from patentability, including abstract ideas, mathematical methods, and computer programs "as such." This language — "as such" — is the critical qualifier. Mexican patent law, like the European Patent Convention and Brazilian practice, draws a distinction between a software program in the abstract and a technical invention that happens to be implemented in software.

An invention is patentable in Mexico if it: (1) is novel, (2) involves an inventive step, (3) is industrially applicable, and (4) does not fall within the excluded categories. For computer-implemented inventions, IMPI examines whether the claimed invention achieves a technical effect beyond the normal physical interactions between the software and the hardware on which it runs. If the software produces a technical effect in the physical world — controlling industrial machinery, optimizing network routing at the hardware level, achieving a new method of image compression that reduces file sizes measurably — it may be patentable.

In practice, IMPI has granted patents for: telecommunications methods implemented in software, security encryption algorithms with hardware implementations, biometric identification systems, and medical device control software. Pure SaaS applications, business method software, and mathematical optimization algorithms are generally not patentable in Mexico.

IMPI Registration and Process

Patent applications in Mexico are filed with IMPI and undergo formal examination, publication, and substantive examination before grant. The typical timeline from application to grant is 3-5 years. Mexico is a member of the Patent Cooperation Treaty (PCT), allowing international applications designating Mexico to enter the national phase within 30 months of the priority date.

For startups expanding into Mexico, the key strategic question is whether to file national Mexican patents directly or through the PCT route. The PCT provides additional time to assess market potential before incurring the cost of national phase entry, making it the preferred approach for most early-stage startups. IMPI national filing fees are modest by international standards, but prosecution costs accumulate over the 3-5 year examination period.

Trade Secrets as the Primary Protection

Given the limitations on software patent protection in Mexico, trade secrets are often the more appropriate primary protection mechanism for software innovation. The LFPPI provides robust trade secret protection in Articles 163-172. A trade secret under Mexican law is information that: (1) has a secret character (is not generally known or easily accessible), (2) has commercial value precisely because it is secret, and (3) is subject to reasonable measures to maintain its secrecy.

Trade secret protection in Mexico is particularly strong because the LFPPI provides criminal sanctions for trade secret misappropriation, in addition to civil remedies. Article 221 establishes criminal penalties for trade secret theft, espionage, and unauthorized disclosure, with imprisonment terms of 2 to 9 years for aggravated cases. For startups with valuable algorithms, training data, or proprietary methods, trade secret protection backed by robust contractual NDAs and technical access controls may provide better ROI than attempting to navigate IMPI's patent prosecution process.

Software Copyright in Mexico

Software in Mexico is protected under the Ley Federal del Derecho de Autor (LFDA) as a literary and artistic work. Article 101 of the LFDA defines computer programs as literary works expressed in source or object code. Protection is automatic upon creation and requires no registration, though registration with the Instituto Nacional del Derecho de Autor (INDAUTOR) creates useful evidentiary presumptions.

The LFDA adopts a similar framework to the Argentine and Brazilian models for employee and contractor code. For works created by employees in the exercise of their functions, the employer holds the economic rights. For contractor-created works, the ownership depends on the contractual arrangement — absent a written IP assignment, the contractor retains copyright. The WIPO framework for author's rights applies throughout Mexico's copyright system.

Open Source License Enforcement in Mexico

Mexican courts enforce open source licenses as binding copyright licenses under the LFDA. GPL v3 and AGPL v3 obligations are fully enforceable. A startup that incorporates GPL v3-licensed code into a proprietary product distributed in Mexico, without complying with the GPL's source code disclosure requirements, is in violation of both the license terms and the LFDA.

The Open Source Initiative (OSI) license catalog provides authoritative definitions of approved open source licenses. For compliance purposes, startups should maintain a complete inventory of all open source components in their production systems, mapped to their SPDX license identifiers, and updated with each dependency change.

Mexican IP Due Diligence for Investors

Investors conducting due diligence on startups with Mexican operations focus on several Mexico-specific IP issues. First, INDAUTOR registration status — whether the startup's core software has been registered and whether registrations are current. Second, trade secret protection measures — whether employee and contractor agreements include robust confidentiality provisions compliant with LFPPI requirements. Third, open source compliance — whether the startup has a systematic process for tracking open source dependencies and their license obligations.

Frequently Asked Questions

LATAM IP and Regulatory Resources

The following authoritative sources provide the legal and regulatory foundation for the topics covered in this guide. All LATAM jurisdictions are signatories to the WIPO treaties that form the international IP framework, and domestic laws implement TRIPS Agreement minimum standards.

• TRIPS Agreement — WIPO — The foundational international IP treaty binding all WTO member states, including Argentina, Brazil, Mexico, Colombia, Chile, and Peru.
• INPI Brazil — Brazil's National Institute of Industrial Property; administers software registration, patents, and trademarks under Lei 9.279/1996 and Lei 9.609/1998.
• INPI Argentina — Argentina's IP office; manages software registration under Ley 11.723 and trademark protection.
• Open Source Initiative License List — Authoritative catalog of OSI-approved open source licenses including GPL v2, GPL v3, AGPL v3, MIT, and Apache License 2.0.
• SPDX License List — Machine-readable license identifiers used in Software Bill of Materials (SBOM) generation and CI/CD compliance tooling.
• IMPI Mexico — Instituto Mexicano de la Propiedad Industrial; administers patents and trademarks under the LFPPI.

For startups operating across LATAM, compliance with LGPD (Brazil), LPDP (Argentina — Ley 25.326), LFPDPPP (Mexico), and the TRIPS Agreement framework is not optional. Each framework creates distinct obligations that require jurisdiction-specific legal review. Our fixed-price audit packages provide this review with 48-hour delivery, so your team can move quickly without sacrificing legal certainty.

Practical Mexico IP Strategy for Tech Startups

For most Mexican tech startups, the practical IP strategy combines three layers: trade secrets for core algorithms and proprietary methods, copyright registration with INDAUTOR for software products, and trademark protection through IMPI for brand assets. Patent protection is reserved for the small subset of technical innovations that genuinely meet IMPI's computer-implemented invention requirements — not for the general business logic or user interface designs that comprise most startup IP.

Trade secret protection under the LFPPI requires three conditions: secrecy (the information is not generally known or accessible), commercial value derived from secrecy, and reasonable measures to maintain secrecy. For tech startups, reasonable measures include: access controls limiting who can view source code and model weights, NDAs with all employees and contractors that explicitly cover trade secrets under LFPPI definitions, compartmentalization (engineers working on core algorithms don't have access to business intelligence systems and vice versa), and documented security protocols that can be produced in enforcement proceedings.

INDAUTOR copyright registration provides a complementary layer of protection for software that is not a trade secret — published software, open source contributions, and software distributed to customers. The registration process is administered by the Secretaría de Cultura through INDAUTOR's online platform. Like INPI Brazil and INPI Argentina, INDAUTOR registration creates a public record and a rebuttable presumption of authorship that simplifies enforcement and due diligence.

Mexico's participation in the TRIPS Agreement and the Berne Convention means that foreign copyright holders' rights are fully enforceable in Mexican courts against Mexican companies. Conversely, Mexican software companies' LFDA copyright protections extend to all Berne Convention member states — including the US, EU, and all major LATAM markets. For Mexican startups expanding internationally, the Berne Convention baseline means that domestic copyright registration (through INDAUTOR) provides protection in all major markets without requiring separate foreign filings. The WIPO portal provides a comprehensive reference for the international IP framework that supports LATAM startup IP protection globally.