Security Policy

Overview

We protect your personal information, documents, and payment details when you place an order, submit files, or manage your account. Our security practices cover how your data is transmitted, stored, and accessed while we provide your translation services.

This Security Policy explains the technical, organizational, and procedural safeguards we use to protect your information. It covers secure file storage, encrypted connections, access controls, and the security practices we review when selecting third-party providers.

No system is completely immune to risk. We continually monitor, maintain, and improve our infrastructure and data handling practices to protect your information and keep the documents entrusted to us confidential.

Data Encryption

Connections to our website use HTTPS with TLS certificates from Let's Encrypt. Page loads, form submissions, document uploads, and account interactions are encrypted in transit.

Encryption helps prevent data interception or tampering while you use our website. Your connection is protected when you place an order, check its status, submit files, or download a completed translation.

Secure Hosting Environment

Our website is hosted on DigitalOcean. DigitalOcean uses firewalls, threat monitoring, regular patching, and data center security controls to protect hosted applications.

All our servers are hardened and routinely updated to maintain a secure operating environment. We isolate customer data and follow the principle of least privilege for internal access.

Secure File Storage

Uploaded and translated documents are stored securely using Amazon Web Services (AWS). AWS provides encryption at rest, replication across availability zones, and durable file storage.

AWS maintains compliance programs for standards and regulations including ISO 27001, SOC 1/2/3, and GDPR.

Access Controls

Access to sensitive customer data is strictly limited to authorized personnel with a legitimate need. Our translators, proofreaders, and internal staff are only granted access to the specific files or information required to complete your project.

All team members are required to sign confidentiality agreements and undergo training on secure data handling. Administrative access to infrastructure is limited, logged, and monitored continuously.

When a customer account is deleted, customer-facing access to account pages, quote status, order status, invoices, payment pages, and file links is disabled. Records and files retained for the purposes described in our Privacy Policy remain subject to internal access controls.

Payment Security

We process payments securely through PayPal and Braintree. Both are PCI DSS Level 1 certified, the highest level of compliance for payment processors.

We never store your credit card or banking details on our servers. Payment information is transmitted securely and directly to the processor, protecting your financial data from unauthorized access.

System Monitoring & Updates

We actively monitor our systems to detect unauthorized access, suspicious activity, or performance issues. Automated alerts and manual reviews help us maintain high availability and security standards.

Security patches are applied regularly, and we follow best practices in software development and deployment. Our team stays up to date with the latest vulnerabilities and threat intelligence to minimize risk and respond quickly when needed.

Confidentiality

Personal, legal, medical, and financial documents can contain sensitive information. We treat the files you entrust to us as confidential and handle them with care throughout the translation process.

All translators and staff are contractually obligated to maintain strict confidentiality. Your files are never shared or used for any purpose other than completing your order, and we do not disclose customer data to third parties without explicit consent.

Third-Party Services

We select third-party providers for hosting, file storage, payment processing, and analytics based on their security, reliability, and compliance practices.

Before integrating a service, we review its security practices and data handling policies. We consider certifications such as PCI DSS, SOC 2, and ISO 27001, along with GDPR compliance.

Compliance

We are committed to protecting your privacy and handling your data responsibly. We strive to follow industry best practices in data protection, security, and transparency.

We want you to understand how we manage, store, and use your personal information. If you have questions or requests about your data, contact us and our team will work with you to address them.

Contact Us

If you have any questions about this Security Policy or would like to report a security concern, please contact us.