Security • Privacy • Compliance • Confidentiality

At GTS Translation, protecting your confidential documents is our highest priority. This Trust Center provides a clear, transparent overview of how we secure customer data, maintain privacy, and ensure the safe handling of all files provided to us for translation. It is designed to support the due-diligence needs of enterprise security, compliance,
and procurement teams.

1. Commitment to Confidentiality

GTS has served thousands of corporate, academic, medical, technology, and government organizations worldwide. Every project is handled under strict confidentiality:

• All translators, editors, engineers, and staff work under legally binding NDAs.
• Client documents are never shared, disclosed, or reused outside the contracted project scope.
• Files are used solely for producing the requested translation and supporting customer service interactions.
• NDAs can be signed upon request.

This applies to all content types, including technical documents, financial records, HR materials, product documentation, regulatory submissions, legal agreements, and internal communications.

2. Secure File Upload & Storage

Your documents are transmitted, stored, and managed using modern security and privacy practices appropriate for sensitive enterprise content:

• HTTPS/TLS 1.2+ encryption protects all file uploads and downloads.
• Hosted on AWS, leveraging industry-standard physical, network, and infrastructure security controls.
• Access to customer files is strictly limited on a least-privilege, need-to-know basis.
• All access is logged and monitored internally.
• Files are never stored on unauthorized local devices; if temporary local access is required for translation work, it is covered by NDA and governed by internal controls.
• We regularly review and update our internal security practices to align with evolving best practices for handling sensitive content securely.

3. Data Privacy & Global Compliance

GTS complies with major international data-protection frameworks, including:

• GDPR (EU/EEA)
• UK GDPR
• US privacy regulations, including CCPA/CPRA-aligned principles

Our full Privacy Policy covers:

• What personal data we collect
• How it is used, stored, and protected
• Your rights to deletion, correction, and access
• How cookies and website analytics tools operate

👉 View our complete Privacy Policy.

4. Document Handling & Retention

We implement strict lifecycle controls to ensure the appropriate handling and
retention of customer files:

• Files are retained only as long as necessary for translation delivery, QA, invoicing, and post-project support.
• Upon request, GTS will delete all submitted material from our systems.
• Customer content is never used to train AI models or shared with any AI provider for training purposes.
• Customers may request return or destruction of files to meet internal governance or regulatory requirements.
• We maintain written data-retention and deletion procedures aligned with industry norms.

5. Translator Security & Vetting

GTS works only with professional, vetted translators and subject-matter experts:

• All linguists sign confidentiality and data-handling agreements.
• Only translators assigned to a specific project receive access to the relevant materials.
• ISO-17100-aligned workflows govern translator qualification, review, and quality control.
• Internal staff follow defined onboarding/offboarding protocols to maintain access hygiene.

This ensures secure, high-quality work appropriate for enterprise, technical, regulatory, and operational documents.

6. Compliance & Security Documentation

We maintain internal documentation and can share high-level summaries upon request:

• Information-security policies
• Confidentiality and data-handling procedures
• Translator and staff NDAs
• Data-retention and deletion policies
• Workflow descriptions for secure translation processing
• Overview of hosting, access control, and risk-management practices