Security for your law firm

End-to-end encryption of all transmitted data

The protection and confidentiality of your data is very important to us. We have gone to great lengths to ensure the best possible security of your data.

Why is data processed on MaraDocs servers at all?

Some of MaraDocs' advanced features are only possible if your data can be processed on our servers. These are mainly complex AI analyses, image processing algorithms, and text recognition. We are aware that the trust you place in us is great and we take this extremely seriously.

Let us briefly explain what happens to your files:

In your browser, the files are encrypted for transmission to MaraDocs (https / ssl). This serves the purpose that possible eavesdroppers on the way (man-in-the-middle) cannot find out anything about the files.

At the same time, your browser generates a key with which we store the data encrypted on our server after processing (encryption at rest). However, we do not store the key.

Why do we store data on our server after processing?

We do this to enable the functionality that you can resume an editing session even after a connection interruption without having to start from scratch. Due to the way MaraDocs works, there is no way to determine a clearly defined point in time when processing is finally complete. (Unless you explicitly click on "Delete session"). So we have to store the data at least temporarily on our servers.

How does the encryption work?

When you reconnect to MaraDocs after a connection interruption, your browser must send the key stored only with you back to our server. Otherwise, our server cannot decrypt and process the files you may request. Immediately after processing, our server "forgets" the key again. By the way, this key is newly created from random bytes for each new session.

Why so complex?

As a MaraDocs user, you actually don't notice any of these processes. We do this to ensure that in the unlikely event that attackers successfully break into our systems, your already processed data cannot fall into the hands of third parties.

Can MaraDocs employees read my files?

We have designed the entire system so that no one but you can access your files. Unfortunately, no cloud software provider can technically completely rule out that data sent for processing can be read, but we have implemented all common security measures to make this danger as unlikely as possible.

Only our two founders Raui Ghazaleh and Martin Kurtz have admin rights

At MaraDocs, we ensure that only our two founders, Raui Ghazaleh and Martin Kurtz, have the technical ability to access the servers where processing takes place with admin rights. The systems are designed to be so isolated that your data is never written unencrypted to a hard drive. Your data is always only in the RAM of our server within the context of the running program. Manual intervention in this system could only be carried out with considerable effort, which would require deliberately reprogramming the systems.

Such a malicious action would contradict everything we stand for and will not happen.