Security for your law firm

End-to-end encryption of all transmitted data

The protection and confidentiality of your data is very important to us. We have put a lot of effort into ensuring the best possible security for your data.

Why is data processed on MaraDocs servers at all?

Some of MaraDocs' advanced features are only possible when your data can be processed on our servers. These are primarily complex AI analyses, image processing algorithms, and text recognition. We are aware that the trust you place in us is significant, and we take it extremely seriously.

Let us briefly explain what happens to your files:

In your browser, the files are encrypted for transmission to MaraDocs (https / ssl). This serves the purpose that possible eavesdroppers on the way (man-in-the-middle) cannot find out anything about the files.

At the same time, your browser generates a key with which we store the data encrypted on our server after processing (encryption at rest). However, we do not store the key.

Why do we store data on our server after processing?

We do this to enable the functionality that allows you to resume an editing session after a connection interruption without having to start over. Due to the way MaraDocs works, there is no way to determine a clearly defined point at which processing is definitively complete. (Unless you explicitly click "Delete session"). We therefore need to store the data on our servers at least temporarily.

How does the encryption work?

When you reconnect to MaraDocs after a connection interruption, your browser must send the key stored only with you back to our server. Otherwise, our server cannot decrypt and process the files you may request. Immediately after processing, our server "forgets" the key again. By the way, this key is newly created from random bytes for each new session.

Why so complex?

As a MaraDocs user, you actually don't notice any of these processes. We do this to ensure that in the unlikely event that attackers successfully break into our systems, your already processed data cannot fall into the hands of third parties.

Can MaraDocs employees read my files?

We have designed the entire system so that no one but you can access your files. Unfortunately, no cloud software provider can technically completely rule out that data sent for processing can be read, but we have implemented all common security measures to make this danger as unlikely as possible.

Only our two founders Raui Ghazaleh and Martin Kurtz have admin rights

At MaraDocs, we ensure that only our two founders, Raui Ghazaleh and Martin Kurtz, have the technical ability to access the servers where processing takes place with admin rights. The systems are designed to be so isolated that your data is never written unencrypted to a hard drive. Your data only exists within the running programme in our server's RAM. Manual intervention in these systems could only be performed with considerable effort that would require deliberately reprogramming the systems.

Such a malicious action would contradict everything we stand for and will not happen.