Legal Center

Access follows least-privilege, role-based rules. Translators get time-limited access only to the documents on their assigned project, inside a secured environment that blocks local downloads and unauthorized transfers, and that access is automatically revoked when the project is complete; administrative staff are restricted from document content. Everyone working on the platform is also bound by the confidentiality terms in our agreement. See Access control and authentication and Confidentiality.

Documents are encrypted with AES-256 both in transit and at rest. Website sessions use SSL, email submissions use TLS, and our Managed File Transfer option uses end-to-end encryption. Backups follow a 3-2-1 strategy (three copies, two media types, one off-site), each encrypted with AES-256 and stored in geographically separate locations. See Document submission security.

Retention depends on the document type: financial and tax records are kept a minimum of 7 years, medical translations a minimum of 6 years under HIPAA, and legal contracts for the contract term plus 7 years, while general communications are kept 1–2 years. At the end of the retention period, electronic files are wiped to U.S. Department of Defense standards and physical documents are shredded by a certified partner, with a certificate of destruction available on request. See Data retention and disposal.

Primary data operations and servers are in secure data centers in California. When data must move outside the EEA or California, transfers use European Commission–approved Standard Contractual Clauses, AES-256 end-to-end encryption, transfer logging, and a Transfer Impact Assessment, and data-localization requirements are honored where the law or your agreement requires them. See International data transfers. Our Terms also note that, as a global operation, data may be transferred to affiliates and clients abroad; see International data transfers in the Terms.

Before any machine-translation step, personal identifiers are automatically redacted; machine translation runs in isolated environments, no personal information is retained in the translation engines, and the output is reviewed by a human. Translation memories are built with privacy by design: personal information is excluded, memories are encrypted with client-specific keys, and access requires two-factor authentication. See Special considerations.

Yes. Healthcare information is processed in isolated, HIPAA-compliant environments by HIPAA-certified translators; legal documents are handled under attorney-client-privilege protocols; and especially sensitive data such as genetic, biometric, or minors’ data is processed in isolated environments with enhanced encryption, mandatory secondary review, and extended audit logging. See Special considerations.

Through forms and certain actions, such as viewing or downloading privileged content, applying for a job, or applying to be a partner, the site may collect your first and last name, job title, company name, email address, phone number, and city, state, and zip code. If you only read or download information, the policy states it does not collect your name, email, or home address. See Personal information.

No. The Privacy Policy states the company never sells or rents email addresses, and the Terms state that neither ABC Translations nor its clients sell your data. Data in identifiable form may be disclosed to public, regulatory, or government authorities only when required by law, legal process, or litigation. See Electronic newsletters and Data collection, use, and disclosure.

You can request access to your personal information and ask to correct, update, delete, or restrict its processing, object to processing, or request data portability. Send requests to our privacy team; the company responds within a reasonable timeframe, and you also have the right to lodge a complaint with the data-protection authority in your jurisdiction. See User data rights.

Personal information is retained only as long as necessary to fulfill the purpose it was collected for or to meet legal, regulatory, or contractual requirements, after which it is securely deleted or anonymized. You can also request deletion of your personal data at any time under the Terms, and account-deletion requests are processed within 30 business days. See Data retention and deletion and Data collection, use, and disclosure.

Data may be shared with trusted third-party service providers only as needed for their specific function; those providers are contractually required to keep it confidential and secure and are prohibited from using it for any other purpose. See Data collection, processing, storage, and sharing.

Yes. Non-personal information may be collected using cookies. Most browsers accept cookies by default, and you can change your browser settings to refuse cookies or to be notified when one is sent. See Cookies.

Yes. Client-portal access requires multi-factor authentication via SMS, email confirmation, or an authenticator app, sessions time out automatically after inactivity, and suspicious activity triggers account lockouts. The platform is also covered by continuous monitoring, regular security audits, and penetration testing. See Access control and authentication.

A 24/7 incident-response team contains and investigates incidents. California residents are notified of qualifying breaches without unreasonable delay and within 45 days, EU supervisory authorities are notified within 72 hours of awareness under the GDPR, and affected clients receive status updates every 48 hours until the matter is resolved. See Security incident response.

The security framework is built to meet the California Consumer Privacy Act (CCPA), the California Privacy Rights Act (CPRA), and the EU GDPR, and the company holds ISO 17100 (translation services) and ISO 27001 (information-security management) credentials, with a CISSP-certified security lead. Translation quality is measured against ISO 9001 and ISO 17100. See the Security overview and the Refund Policy’s Standards and certifications.

The intellectual-property section of the Terms is written for contributors who perform assignments (by uploading deliverables they assign their rights in that work to ABC Translations), and it does not separately spell out a paying buyer’s ownership of a translation they purchase. If you need ownership terms for a purchased translation in writing, contact us. See Intellectual property rights.

A 30-day money-back guarantee runs from the date of payment and pays a full refund in three situations: a recipient on the Guaranteed Acceptance List rejects a certified translation, there is a clear objective error in a critical personal detail, or a technical failure on our side prevents you from downloading the final file. Email our support team within 30 days with your order number and matching evidence. See the money-back guarantee.

You can change an order any time before a translator starts work; once work has begun, changes may not be possible and can affect price or turnaround. Cancellation refunds are prorated: full if no translator has been assigned, partial once work has begun, and none once the translation is complete unless the 30-day guarantee applies. See Order changes and Cancellations.

When a certified translation goes to an organization on our Guaranteed Acceptance List, a 100% money-back guarantee applies: if it is rejected, we make the requested corrections first and refund in full if it still is not approved. For recipients not on that list, acceptance-based refunds do not apply, so it is worth confirming the recipient’s requirements before you order. See Translation acceptance and What’s not covered.

The platform is provided “as is,” warranties are disclaimed, and total liability is capped at the lesser of the amount paid to you in the prior six months or $100, excluding indirect and consequential damages. Disputes are resolved by binding arbitration under the JAMS International Arbitration Rules before a single arbitrator seated in California, conducted in English, with a jury-trial waiver; the Terms are governed by California law and claims must be filed within one year. See Limitation of liability and Arbitration.