Trust & Security
Hosting
Systems we host for clients run on cloud infrastructure in the UAE. Client data does not leave the UAE without the client’s written agreement, except to the listed sub-processors.
Security
- Encryption in transit (TLS) and at rest, including backups.
- Multi-factor sign-in for our staff and for client administrators.
- Role-based access.
- Each client’s data kept separate.
- Audit logs.
- Secure data intake only, never unsecured email.
- Security testing before launch.
- Regular backups.
AI and your data
- We never use client data to train AI models, ours or anyone else’s.
- AI providers are listed sub-processors, under terms that forbid training.
- We send AI only the data a task needs.
- In our property management software, contract drafting sends placeholders, never names, ID numbers or figures.
- A person reviews anything with legal or financial effect.
Ownership
Clients own their data and can export it at any time. Marters owns its software.
End of contract
Clients have 30 days to export their data, then we delete it and confirm in writing. Backups expire within a further 30 days.
Breach response
We tell affected clients without undue delay and within 72 hours.
Data processing agreement
Every client signs one. It is available on request from hello@martersandco.com.
Sub-processors
| Provider | Purpose | Data location | Safeguard |
|---|---|---|---|
| [Cloud hosting provider, UAE region] | [Purpose] | [Data location] | [Safeguard] |
| [Email delivery provider] | [Purpose] | [Data location] | [Safeguard] |
| [AI model provider] | [Purpose] | [Data location] | [Safeguard] |
| [Google Workspace, internal email and documents] | [Purpose] | [Data location] | [Safeguard] |
Clients are told before any change to this list and can object.
Report a security issue
Send security reports to hello@martersandco.com. We ask reporters not to access or change other people’s data.
See also our Privacy Notice.