Information security
ISO/IEC 27001:2022
Internationally recognized ISMS standard. Audited annually by an accredited third-party body.
Our certifications and security architecture are designed so you never have to take our word for it. Examine the evidence yourself.
| Credential | Type | Status |
|---|---|---|
ISO/IEC 27001:2022 Information security · Certified | Certified | Active |
ISO 17100:2015 Translation quality · Certified | Certified | Active |
SOC 2 Type II Service controls · Attested | Attested | Active |
HIPAA Healthcare data · Compliant | Compliant | Active |
GDPR EU data protection · Compliant | Compliant | Active |
ATA Corporate Industry standard · Member | Member | Active |
All metrics independently audited · Last verified Q1 2025
Certifications & compliance
Our certifications are audited by accredited third-party bodies, and our compliance programs are maintained continuously, so your data stays protected.
Information security
Internationally recognized ISMS standard. Audited annually by an accredited third-party body.
Translation quality
The global standard for translation service quality, covering processes, resources, and delivery.
Service controls
Independent validation of security, availability, and confidentiality controls.
Healthcare data
Full PHI protection compliance for medical translations and healthcare documentation.
EU data protection
Lawful processing and cross-border transfer safeguards for EU citizen data.
Industry standard
Corporate member of the American Translators Association since 2007.
Security architecture
Every layer of our infrastructure, every workflow, and every team member operates within a zero-trust security framework built from the ground up.
AES-256 at rest · TLS 1.3 in transit
Every document and connection is encrypted end-to-end. No exceptions.
Zero-trust · MFA enforced
Role-based permissions with mandatory multi-factor authentication and least privilege.
24/7 SOC · real-time alerts
Continuous threat detection with automated incident response and complete audit trails.
Quarterly · NDA-bound
Mandatory security awareness training, phishing simulations, and an NDA-bound workforce.
Region-specific storage
Data stored in line with local regulations. EU data stays in the EU.
SOC 2 certified hosting
Enterprise-grade cloud infrastructure with automated backups and disaster recovery.
Documentation
Public policies are a click away. Certificates, reports, and agreements are shared with verified organizations on request.
Architecture, controls, and incident response procedures.
Independent attestation of our service controls.
Business Associate Agreement for HIPAA-covered entities.
DPA for GDPR compliance and cross-border transfers.
Data collection, processing, storage, and protection.
How we safeguard protected health information.
The terms that govern our services.
The terms for using this website.
Request access
Need certifications, audit reports, or compliance documentation? Submit a request and we'll respond within 1–2 business days.
Submit the form. A confirmation email follows shortly.
Our team verifies your identity and organization.
Access to the requested documents is granted securely.