Security
For your most sensitive information
From encryption to access management, Motex enforces strict controls so the information in your cases stays secure, private and under your control.
Explore Security PortalLegal-grade security
Per-organization isolation
Each organization works in its own space. The database enforces row-level security on every table, so no one can read another organization’s cases.
No model training
Your confidential information stays yours. Motex contractually guarantees that your documents and data are never used to train or fine-tune AI models.
Encrypted in transit and at rest
All traffic is encrypted with TLS 1.3. Documents are stored with AES-256 encryption and the database only accepts encrypted connections.
Corporate sign-in
Single sign-on with Microsoft Entra ID. Your company keeps control of multi-factor authentication, conditional access and user offboarding.
Full traceability
Every action by a user, the AI agent or an automatic rule is recorded: who did it, on which case and when.
Your data, your decisions
Your data is kept while you use Motex. When the service ends, it is returned or deleted, at your choice, and the deletion is certified in writing.
Security is part of everything we do
Motex is built on one principle: protecting the confidentiality of our customers’ information. Controls live in the database and the infrastructure, and each one is documented, versioned and dated, on the security portal.
Explore Security PortalWhat data does Motex process?
The data of the cases your organization follows: public information from the Judiciary, the documents in each case file and what your team adds, such as tasks, amounts and evidence. Motex processes it as a data processor, on your organization’s behalf.
How does Motex keep my data private and secure?
We encrypt data in transit and at rest, isolate each organization’s information in the database and control access by role. Only the users your organization authorizes can see its cases.
Where is my data hosted and processed?
In the United States. The database runs on Supabase (Oregon), documents and processing functions on AWS (Virginia and Ohio) and the application on Vercel (Washington, D.C.). The database is backed up daily.
How does Motex make sure no one trains models on my data?
The data processing agreement prohibits it. The agent calls models through Amazon Bedrock, which does not store prompts or responses, and the account has no custom models.
What happens to my data if I stop using Motex?
When the contract ends, your data is permanently deleted and the deletion is certified in writing. Before that, you can ask us to return it.
How often is the platform’s security reviewed?
Continuously. Every change goes through code review, tests and secret detection, and every week static analysis, dynamic analysis and a secret scan of the full history run against the platform.
How do I report a vulnerability?
Email security@motex.ai with the details. We will respond and keep you updated until it is resolved.