// Trust & Security Report
Microsoft Corporation
Microsoft Translator / Azure AI Translator
Certifications held
14
Maturity
Enterprise
Trains on your data
No
Trust center
Yes
// Certification ledger
Each held certification is backed by a verbatim quote from the vendor's own trust or security page. “Not confirmed” means we could not verify it publicly, not that the vendor lacks it.
Verify on microsoft.com“ISO 27001 (Information Security Management) — 5 ISO certifications applicable to the Translator service”
Verify on microsoft.com“ISO 27018:2014 (Personal Data Protection in Cloud) — the world's first international code of practice for cloud privacy”
Verify on microsoft.com“FedRAMP — High rating for US government agency use in both Azure public and Government clouds”
Verify on microsoft.com“HIPAA/HITECH — Covered under Microsoft's Business Associate Agreement for health information handling”
Verify on microsoft.com“HITRUST — CSF certified for healthcare security and compliance standards”
Verify on microsoft.com“CSA STAR — Cloud Security Alliance attestation for secure cloud computing practices”
Verify on microsoft.com“GDPR — Compliant as a data processor for EU data protection regulations”
Verify on microsoft.com“US DoD Provisional Authorization — Impact Level 4 rating in government cloud”
// Privacy & AI training
Trains on customer data
No
Data processing agreement
Offered
Data region
Within the customer's own Azure subscription and selected Azure region. Custom Translator documents stored encrypted in the customer-selected region until deleted or account expires.
Azure AI Translator (API/enterprise) and Microsoft Translator Pro explicitly do NOT store or train on submitted customer data: 'Customer data submitted for translation to Azure Translator isn't stored permanently and not data is stored at rest. There's no record of the submitted text or document in any Microsoft data center.' CRITICAL EXCEPTION: Free consumer products (translator.microsoft.com web app, Translator mobile apps, Bing Translator, Edge Translator) DO record data for service improvement. Businesses must use the paid Azure AI Translator API or Translator Pro to benefit from the no-trace guarantee.
// Security controls
Bug Bounty Program
Microsoft runs its own MSRC (Microsoft Security Response Center) bug bounty, NOT HackerOne or Bugcrowd. Azure scope awards $1,250 to $60,000 USD. Submissions through msrc.microsoft.com/en-us/msrc/bounty-microsoft-azure.
microsoft.comPenetration Testing
Annual independent third-party audits for SOC, ISO, FedRAMP, and HIPAA certifications. Microsoft also runs internal red-team exercises.
microsoft.comEncryption at Rest
Custom Translator documents stored encrypted in the customer's selected Azure region. Customer-managed key (CMK) support available.
microsoft.comData Isolation
All organizational data remains within the customer's Azure subscription. No data is shared with Microsoft from the paid API tier.
learn.microsoft.comNo-Trace Policy
Text, voice, and documents submitted to Azure AI Translator are processed in memory only and not written to any persistent storage. No records exist in any Microsoft data center after the API call completes.
microsoft.comSecure Future Initiative
Microsoft's company-wide Secure Future Initiative puts security above all else; documented at https://www.microsoft.com/en-us/trust-center
microsoft.com// Products & data scope
data: Free tier. Data IS logged for service improvement. No enterprise data-processing agreement. translator.microsoft.com is retiring June 30, 2026.
Not suitable for sensitive or regulated workloads. Use Azure AI Translator API instead.
data: Pay-as-you-go and committed-use API. No data stored at rest. No training on customer data. Full no-trace guarantee. Data stays within customer's Azure subscription.
Supports text, document, and custom translation. Available via Azure AI Foundry. Full compliance stack (SOC 2, ISO 27001, FedRAMP High, HIPAA).
data: Real-time speech-to-speech translation. No data stored at rest. No data retained for model improvement. Requires Microsoft 365 enterprise subscription.
iOS only (requires iOS 15+). Backed by the same Azure AI Translator no-trace guarantee.
data: Follows Microsoft 365 data handling policies and the customer's M365 DPA. Subject to M365 compliance boundaries.
Data residency and compliance governed by the organization's M365 tenant settings.
data: Customer uploads training documents; stored encrypted in customer-selected Azure region until deletion. Data used exclusively for the customer's own custom translation system. Microsoft does not use documents for other purposes.
Customer-managed keys available. Data deleted on account expiry or explicit delete.
// What to watch
- RETIREMENT: translator.microsoft.com (consumer web app) is retiring June 30, 2026. Users are directed to download the Microsoft Translator mobile app.
- CONSUMER VS ENTERPRISE DATA SPLIT: The free consumer tier (web, app, Bing Translator) DOES log data for service improvement. Only the paid Azure AI Translator API and Translator Pro carry the no-trace guarantee.
- BUG BOUNTY: Microsoft operates its own MSRC bounty program (not HackerOne or Bugcrowd) with payouts up to $60,000 for Azure-scope findings.
- CUSTOM TRANSLATOR: Training documents for custom models ARE retained in the customer's Azure region until explicitly deleted.
// At a glance
Pricing model
Consumer: free (web, mobile). Azure AI Translator: pay-per-character (S0 free tier up to 2M chars/month; paid tiers scale from $10/M chars). Custom Translator: pay-per-character. Translator Pro: enterprise licensing via M365.
Self-hostable
No
// How we verified this
Every certification marked HELD is confirmed against a verbatim quote on Microsoft Corporation's own trust, security, or privacy pages. We reject certifications claimed only on third-party aggregators, on a cloud host's behalf, or by a similarly named company.
Last verified 2026-06-27. Compliance changes over time. Always confirm directly with the vendor before relying on any certification for a purchasing or compliance decision.
microsoft.com