// Trust & Security Report
RWS Holdings plc (acquirer of Papercup's AI dubbing IP)
AI dubbing / voice synthesis technology, now part of the RWS enterprise localization stack (Language Weaver, Trados, TrainAI)
Certifications held
3
Maturity
Enterprise
Trains on your data
Unknown
Trust center
Yes
// Certification ledger
Each held certification is backed by a verbatim quote from the vendor's own trust or security page. “Not confirmed” means we could not verify it publicly, not that the vendor lacks it.
Verify on rws.com“Our commitment to excellence has led us to achieve ISO 27001:2022 certification across many of our products, services, and supporting functions.”
Verify on rws.com“RWS software hosted by RWS Cloud Operations is within the scope of their SOC 2 type II report. An executive summary of the SOC 2 report is available on request.”
Verify on rws.com“We use the services of third parties both in and outside the EU that have signed data processing agreements to process your personal data.”
// Privacy & AI training
Trains on customer data
Not stated
Data processing agreement
Offered
Data region
Global. UK-headquartered (LSE-listed). Personal data processed by third parties both inside and outside the EU under signed data processing agreements.
RWS positions its AI (Language Weaver, secure dubbing) around confidentiality, traceability and human-in-the-loop oversight ('RWS combines human oversight with secure AI to safeguard sensitive information'; 'maintaining the confidentiality and traceability regulators demand'). No explicit 'we do not train on customer data by default' statement was located on the public security/privacy pages, so default training behavior could not be confirmed verbatim. Enterprise localization positioning strongly implies customer content is not used to train shared models, but this should be confirmed via DPA/contract.
// Security controls
Information Security Management System
Formal ISMS built on the ISO 27001 framework; ISO 27001:2022 certified across many products and services
rws.comBug bounty program
None. Vulnerability disclosure accepted via security.reporting@rws.com. Quote: 'Please note that RWS does not currently have a bug bounty program.'
rws.comVulnerability management / SDLC
Documented processes for vulnerability identification/management, secure SDLC, change management, patch management, and incident response (per published Security Policy FAQ)
rws.comSecurity documentation
RWS Language Cloud Security White Paper and SaaS Security White Paper published; ISO 27001 certificate and SOC 2 executive summary available on request
rws.comSecurity governance
Dedicated information security team led by a Security Governance, Risk and Compliance Manager; program owned by the CIO with an Information Security Steering Committee
rws.com// Products & data scope
data: Customer video/audio content and scripts processed for synthetic voice dubbing with human-in-the-loop refinement by RWS linguists
Standalone Papercup company/product ceased; RWS acquired the IP in June 2025 to embed dubbing into its enterprise localization stack. Original papercup.com now redirects to RWS.
data: Enterprise content translated across 250+ languages; positioned around confidentiality and traceability
Core RWS AI translation platform; Language Weaver Pro marketed as flagship AI translation solution.
data: Enterprise translation memories, terminology and workflow content
Part of RWS language platforms ecosystem.
data: Human-in-the-loop data validation/annotation for AI training, including high-security environments
Distinct compliance scope for AI data work.
// What to watch
- Slug 'papercup' no longer maps to an independent vendor: RWS acquired Papercup's AI dubbing IP on 26 June 2025 and the standalone product/company is gone. Directory listing should reflect RWS ownership.
- Default AI training behavior on customer data not confirmed by a direct vendor quote; mark as unknown and verify via DPA.
- Penetration testing not explicitly documented on public pages.
- Certification scope caveat: ISO 27001:2022 is held 'across many of our products, services, and supporting functions' (not all), and the SOC 2 Type II scope is 'RWS software hosted by RWS Cloud Operations.' Whether the newly acquired Papercup dubbing IP (acquired June 2025) yet falls within either certification scope is not confirmed. Badges reflect RWS-wide posture, not a product-specific attestation for the dubbing technology.
- Evidence note: the SOC 2 Type II proof quote was not present in the captured trust-page snapshot (the FAQ answers were collapsed/not expanded in capture). The quote was confirmed verbatim against the live RWS security page during re-review, so the claim is retained as source-backed.
// At a glance
Pricing model
Enterprise / custom (contact sales; no public self-serve pricing)
Self-hostable
Not stated
// How we verified this
Every certification marked HELD is confirmed against a verbatim quote on RWS Holdings plc (acquirer of Papercup's AI dubbing IP)'s own trust, security, or privacy pages. We reject certifications claimed only on third-party aggregators, on a cloud host's behalf, or by a similarly named company.
Last verified 2026-06-27. Compliance changes over time. Always confirm directly with the vendor before relying on any certification for a purchasing or compliance decision.
rws.com