// Trust & Security Report
Translated srl (MateCat)
MateCat is a free, open-source web-based Computer-Assisted Translation (CAT) tool designed for professional translators and Language Service Providers. The hosted version (matecat.com) is operated by Translated srl. MateCat features AI-driven precision, adaptive machine translation (ModernMT), and collaborative translation memory.
Certifications held
6
Maturity
Growth
Trains on your data
Unknown
Trust center
No
// Certification ledger
Each held certification is backed by a verbatim quote from the vendor's own trust or security page. “Not confirmed” means we could not verify it publicly, not that the vendor lacks it.
Verify on trust.translated.com“The Translated Trust Center lists "ISO/IEC 27001:2022" and "ISO/IEC 27001:2013" among its certifications. These are held by Translated srl, which operates the hosted matecat.com service; MateCat's own site does not reference them.”
Verify on trust.translated.com“The Translated Trust Center lists "ISO 9001:2015" among its certifications. Held by Translated srl, the operator of the hosted matecat.com service.”
Verify on trust.translated.com“The Translated Trust Center lists "ISO 17100:2015" (translation services) among its certifications. Held by Translated srl, the operator of the hosted matecat.com service.”
Verify on trust.translated.com“The Translated Trust Center lists "SOC 2 Type 1" among its attestations. Held by Translated srl, the operator of the hosted matecat.com service; note this is Type 1 (point-in-time), not Type 2.”
Verify on trust.translated.com“The Translated Trust Center lists "GDPR" among its compliance standards. MateCat's own terms state: 'We will not share, sell or transfer "Personal Data" to third parties without users' express consent' and commit to 'retaining your personal information only for as long as necessary.'”
Verify on trust.translated.com“The Translated Trust Center lists "PCI DSS" among its compliance standards. Held by Translated srl, the operator of the hosted matecat.com service.”
> Show 2 unconfirmed / not-held certifications
source: trust.translated.comNo public evidence of HIPAA certification for MateCat or Translated. As a translation tool, not positioned for healthcare/medical data handling.
source: site.matecat.comNo public evidence of FedRAMP certification. MateCat does not market federal compliance certifications.
// Privacy & AI training
Trains on customer data
Not stated
Data processing agreement
Offered
Data region
Not explicitly stated; inferred EU (Translated srl based in Italy, uses AWS infrastructure with EU data centers)
MateCat uses AI/LLMs for context-specific terminology definitions and adaptive machine translation (ModernMT). No explicit opt-out policy documented for AI training on user translations. Public data segments contributed to MyMemory may be used for model improvement; private segments are marked and protected.
// Security controls
Encryption in transit
MateCat privacy guide states it 'works with an encryption layer which uses the SSL protocol for server-to-client communication' and that 'all data sent from your browser to the Matecat servers is encrypted and cannot be read by third parties'
guides.matecat.comEncryption at rest
Data stored in secure cloud storage with advanced encryption and built-in redundancy across multiple locations
matecat.comInfrastructure
AWS-based infrastructure (Translated operates the hosted service); Translated maintains firewall, IDS/IPS, and network penetration testing
trust.translated.comAccess controls
Automated account management, access logging, controlled data access protocols; private vs. public data classification
guides.matecat.comData availability
Built-in redundancy ensures data is backed up in multiple locations; users can download data at any time for migration
matecat.comIncident response
Translated maintains incident response procedures with designated personnel per its Trust Center documentation
trust.translated.comEndpoint protection
Endpoint Detection & Response (EDR), disk encryption, anti-malware solutions (via Translated infrastructure)
trust.translated.com// Products & data scope
data: Translation projects, segments, translation memories, termbases, user authentication data, usage analytics
Free, web-based, unlimited users and projects. No per-seat pricing. Includes adaptive MT (ModernMT), AI-powered terminology suggestions, and real-time collaboration. Public and private data modes supported.
data: Same as hosted version, but fully under user's control when self-hosted
LGPL-licensed, open-source. Users can download source code and deploy on their own infrastructure for complete data sovereignty. No SaaS trust/compliance inheritance in this mode.
// What to watch
- MateCat does not explicitly market or reference Translated's certifications in its own security/compliance documentation. Certs belong to parent company Translated srl; certification applicability to MateCat product itself could be clearer.
- No explicit privacy policy found at standard location (privacy.matecat.com returned 404); privacy terms embedded in site.matecat.com/terms.
- AI training data practices unclear: MateCat uses LLMs for terminology and adaptive MT but no explicit opt-out mechanism documented. Public data contributed to MyMemory may be used for model improvement.
- Data center location not explicitly disclosed; inferred EU based on Translated's Italy headquarters and AWS mention, but specific region(s) not stated.
- MateCat is free, open-source tool operated by a growth-stage company (Translated), but certifications belong to the service operator (Translated srl), not the product brand (MateCat).
// At a glance
Pricing model
Freemium (free hosted translation tool; revenue from outsourced translation services marketplace)
Self-hostable
Yes
// How we verified this
Every certification marked HELD is confirmed against a verbatim quote on Translated srl (MateCat)'s own trust, security, or privacy pages. We reject certifications claimed only on third-party aggregators, on a cloud host's behalf, or by a similarly named company.
Last verified 2026-07-07. Compliance changes over time. Always confirm directly with the vendor before relying on any certification for a purchasing or compliance decision.
site.matecat.com