Security at Motaded
Your company’s records, accounts and submissions are sensitive. Here’s how we protect them — and what stays in your hands.
-
SIGN-IN
Nafath or verified email
-
SUBMISSIONS
Only with your approval
- To confirm
DATA
Stored in Saudi Arabia
- To confirm
ENCRYPTION
In transit and at rest
Four rules we build around
-
Your accounts stay yours
You sign in to each authority yourself. We never ask for or store your Nafath password.
-
Nothing without your approval
Every submission waits for you to review and send it.
-
Least access
People see only the companies and products they’re given. Staff access is limited and logged.
-
Honest about what we do
We publish what’s in place, and mark what’s still to come.
You prove it’s you. You decide what’s sent
Nafath confirms your identity directly, and every submission to an authority waits for your approval.
NAFATH SIGN-IN
Sign in with Nafath
You approve the request in the Nafath app. Motaded never receives your Nafath password or codes.
BEFORE EVERY SUBMISSION
Review before you send
Platform shows what will be submitted and from which account. You send it — or not.
How we protect your data
What’s in place today. Items marked To confirm will be finalised before launch.
- To confirm
Where data is stored
In data centres in the Kingdom of Saudi Arabia
- To confirm
Encryption in transit
All traffic to Motaded uses TLS 1.2 or higher
- To confirm
Encryption at rest
Databases, files and backups are encrypted
-
Company separation
Each company’s data is kept apart; people only see companies they belong to
- To confirm
Backups
Regular backups, tested restores
- To confirm
Staff access
Only the people who need it, logged and reviewed
-
Activity history
Who did what and when, for every request and document
-
Incident response
We tell you and the relevant authority when the law requires it
You decide who sees what
Owners invite people and choose their access for each product. Every action on a request or document is recorded.
-
Owner
Everything, including team and billing
-
Admin
Manage requests, documents and people
-
Member
Work on what they’re given access to
-
Viewer
See, but not change or submit
To confirm
Built for Saudi data protection rules
We handle personal data in line with the Personal Data Protection Law (PDPL). Certifications will be listed here as we receive them.
-
PDPL
Your rights to access, correct and delete personal data, and how to exercise them
-
No selling of data
We don’t sell your personal data or company records
-
Privacy policy
What we collect, why, and how long we keep it
Motaded is a private company, not a public authority.
Found a security issue? Tell us
Email security@motaded.sa with what you found and how to reproduce it. Please don’t access other people’s data or share the issue publicly until we’ve fixed it. We’ll reply within 3 working days.
To confirmSecurity questions
No. Nafath confirms your identity directly. Motaded never receives your Nafath password or codes.
