Strong sign-in for your account, server-side access controls on your projects, transparency about who processes data, and a clear line that your prompts and code are not used to train Motivd models.
Today, Motivd sign-in uses Google, GitHub, or email (via Supabase Auth). Access to your projects and data is enforced server-side (including database row-level security) so accounts only reach their own resources. Apps you build can add enterprise login (SAML/OIDC, SCIM) in your codebase; organization-wide SSO for the Motivd product itself is arranged with our team when needed—contact security@motivd.com.
Flows such as PRD review help teams align on scope before implementation. Project access is account-based and enforced server-side. Broader team roles for who can edit versus publish are evolving—tell us your requirements if you are standardizing Motivd across a larger org.
Secrets are encrypted at rest and access-controlled by role. They are not exposed in plaintext in logs or interfaces. Access is limited to authorized environments and actions.
We run on major cloud providers (for example Vercel and Supabase) with encryption in transit and at rest. Where data is physically processed depends on those providers and configuration; we are transparent about subprocessors in our Privacy Policy and can discuss residency and data protection agreements with enterprise customers.
We do not use customer prompts, code, or workspace data to train Motivd models. When we work with AI providers, contractual agreements restrict training and retention of customer data. Your work stays your work.
Each workspace and project is logically separated. Customer data is not accessible across accounts. Environment boundaries are explicitly defined and evaluated before changes are published.
Motivd continuously monitors platform activity for misuse, anomalous behavior, and compromise. Automated systems enforce rate limits and detect abuse across users and workspaces, with high-risk activity reviewed by our trust and safety team.
The workspace Security area is an early surface for dependency and configuration visibility. Coverage is expanding—use it alongside your own CI, dependency scanning, and review gates before production deployments.
Motivd Cloud is protected by web application firewall (WAF) controls, network isolation, encrypted data storage, and adaptive rate limiting at the IP, user, and workspace level.
Summaries on this page support procurement conversations. For current attestations, questionnaires, and our subprocessor list, email security@motivd.com.
One workspace turns plain-language intent into a real product with PRD alignment, owned code, and one deploy path.
