We take security seriously at Motiva AI. Here’s a brief look at how.

Data Center Security

Motiva AI’s SaaS platform is hosted at a Tier 1 data center of the world’s leading cloud services provider. Our hosting partner has multiple global certifications including, but not limited to, SOC1/2/3, ISO27001, SSAE 16 and EU/US Safe Harbor. Their data center and hosting services provide the following security measures:

• Physical access is strictly controlled by professional security staff utilizing video surveillance, intrusion detection systems, and other electronic means.
• Two-factor authentication multiple times to gain physical access to data center facilities.
• State-of-the-art fire detection and suppression.
• Advanced power, climate, and temperature management and controls.
• Redundant internal networks.
• Fully redundant electrical power systems maintainable without impact to operations, 24 x 7.
• Uninterruptible Power Supply (UPS) units provide back-up power in the event of electrical failure for critical and essential loads in the facility. Generators provide back-up power for the entire facility.

Network Security

• Designated, dedicated and controlled network that is fully separated from the public Internet.
• Our network model implements multi-tiered subnets to segregate web, application and database traffic.

Secure Data transmission & Session Management

• Data transmission encrypted using SSL 3.0 / TLS 1.2.
• User sessions are tokenized during the login; each transaction is verified using session tokens
• Data is fully encrypted in transit and at rest.
• Storage is in a private VPC that is inaccessible from the public Internet.

Tapeless Backup & Recovery

• Operational, Customer and IP data is backed up regularly and periodically tested.
• Electronic backup to redundant data centers allows full restoration of customer and application data.
• Tapeless (disk to disc) backup provides additional security.

Security Monitoring and Assessments

• We evaluate application and network vulnerabilities on a regular basis.
• We monitor notifications and alerts from various sources to continually assess and remedy potential security risk.