// Trust & Security Report

    Translated S.r.l. logo

    Translated S.r.l.

    Professional translation and localization platform (TranslationOS, Lara AI). Serves 380K+ customers with AI-augmented human translation, APIs for developers, enterprise platforms, and freelancer tools across 200+ languages.

    Certifications held

    7

    Maturity

    Enterprise

    Trains on your data

    Yes

    Trust center

    Yes

    // Certification ledger

    Each held certification is backed by a verbatim quote from the vendor's own trust or security page. “Not confirmed” means we could not verify it publicly, not that the vendor lacks it.

    ISO 27001:2022
    HELD

    Translated has successfully renewed its ISO 27001 certification, the international standard for information security management.

    Verify on trust.translated.com
    ISO 27001:2013
    HELD

    ISO/IEC 27001:2013 listed as current certification on Trust Center

    Verify on trust.translated.com
    ISO 9001:2015
    HELD

    ISO 9001:2015 – Quality Management listed on Trust Center

    Verify on trust.translated.com
    ISO 17100:2015
    HELD

    ISO 17100:2015 – Translation Services Management standard compliance

    Verify on trust.translated.com
    PCI DSS
    HELD

    PCI DSS – Payment Card Industry Data Security Standard listed as certification

    Verify on trust.translated.com
    SOC 2 Type 1
    HELD

    SOC 2 Type 1 – Service Organization Control certification

    Verify on trust.translated.com
    GDPR Compliance
    HELD

    in compliance with the requirements in Regulation (EU) 2016/679 of the European Parliament and Council

    Verify on translated.com
    > Show 5 unconfirmed / not-held certifications
    SOC 2 Type 2
    NOT CONFIRMED

    No public evidence of SOC 2 Type 2 certification; only Type 1 mentioned

    source: trust.translated.com
    HIPAA
    NOT CONFIRMED

    No public evidence of HIPAA certification on Trust Center or vendor domain

    source: trust.translated.com
    FedRAMP
    NOT CONFIRMED

    No public evidence of FedRAMP certification

    source: trust.translated.com
    ISO 27018
    NOT CONFIRMED

    No public evidence of ISO 27018 certification

    source: trust.translated.com
    ISO 27701
    NOT CONFIRMED

    No public evidence of ISO 27701 Privacy Information Management certification

    source: trust.translated.com

    // Privacy & AI training

    Trains on customer data

    Yes

    Data processing agreement

    Offered

    Data region

    Primary: EU/EEA via Hitachi CBT data center. Optional: EU or USA via Amazon infrastructure.

    COMPLEX WITH DOCUMENTED INCONSISTENCIES. Default is Learning Mode: customer translations are stored and used to improve Lara's translation model in real-time ('Every approved translation feeds back into Lara'). Incognito Mode available (no storage). Lara T&C Section 4.2 grants permission 'for refining the translation model.' However, Google Sheets integration explicitly promises no training use—this same guarantee is absent from API/translation-memory documentation. Third-party analysis (Loekalization, June 2026) documents contradictions between support responses and binding terms. 25M-translation training dataset sourced from professional translations plus Matecat (free tool where default is public unless users apply privacy key), creating potential consent gaps for confidential material. Enterprise/paid tiers can negotiate zero-storage contracts.

    // Security controls

    Encryption in transit

    HTTPS/TLS standard

    translated.com

    Data retention (translations)

    6 months post-delivery, then destroyed or anonymized per Article 6.3, 7.4

    translated.com

    Data Processing Agreement

    Available; DPA is integral part of Terms (Article 19.2, referencing EU Regulation 2016/679)

    translated.com

    Data Protection Officer

    Simone Giovanni Perone, dpo@translated.com

    translated.com

    Translator confidentiality obligations

    Translators contractually bound to keep all project information strictly private and confidential (Article 11.1)

    translated.com

    Default learning mode

    Enabled by default (data stored for model improvement). Incognito mode (no storage) is opt-in.

    support.laratranslate.com

    // Products & data scope

    TranslationOSLocalization Platform

    data: Enterprise translation workflows with AI and human review

    Adaptive AI service delivery platform; context-aware localization with transparency and control

    Lara AIMachine Translation Engine

    data: 200+ languages, trained on 25M professional translations

    Real-time adaptation: approved translations feed back into model. Default Learning Mode stores data; Incognito Mode available. Trained on high-quality professional translations, not web-scraped content.

    Lara APIsDeveloper APIs

    data: Translation workflow orchestration for SaaS integration

    Embed professional translation services into products

    Lara Translator PlatformEnterprise Translation Tool

    data: Daily enterprise translation needs

    For internal teams

    Free AI ToolsFreemium Translation Utilities

    data: Text, audio, subtitles, dubbing

    Standalone or CAT-tool integrated

    Specialized ServicesManaged Services

    data: Google Ads, software localization, subtitling, real-time interpretation

    Human expert + AI hybrid workflows

    // What to watch

    • AI-Training-Policy-Inconsistency: Lara's own documentation contains conflicting statements. Help center claims translations improve 'the translation model' (shared); DPA claims only update 'Translation Memories' (private); developer docs claim 'no model training required.' Binding T&C Section 4.2 permits 'refining the translation model.' Google Sheets integration explicitly excludes training use, but same promise absent from API/translation-memory docs. Third-party analysis (Loekalization, June 2026) documented these gaps with no vendor response for a week.
    • Default-Learning-Mode-Enabled: Customer data is stored and used for model improvement by default. Incognito Mode (no storage) is opt-in, not the default. This is a design choice that may not align with privacy-first expectations.
    • Training-Dataset-Consent-Gap: 25M-translation training dataset includes segments from Matecat (free tool) where default is public-visibility unless users actively apply a privacy key. Potential consent issues for confidential client-owned material.
    • SOC-2-Type-1-Only: No extended control period audit (Type 2). Suitable for operational assurance but not ideal for detailed controls testing or organizations requiring longer audit trails.
    • No-HIPAA-FedRAMP-Advanced-Privacy: Not suitable for healthcare (HIPAA), government (FedRAMP), or strict privacy-extension (ISO 27701) requirements. No evidence of ISO 27018 (cloud privacy).
    • Over-Claim-Risk: Marketing emphasizes 'secure translation workflow' and 'data protected from start to finish,' but default Learning Mode enables shared-model training without explicit per-project consent disclosure.
    • Infrastructure-Geographic-Ambiguity: Primary data center in EU/EEA, but Amazon infrastructure can process in 'EU or USA'—geographic flexibility introduces residency uncertainty for strict EU-only requirements.

    // At a glance

    Pricing model

    Per-word quote-based with cost calculator; transparent pricing; flexible scaling from single projects to managed solutions

    Self-hostable

    No

    // How we verified this

    Every certification marked HELD is confirmed against a verbatim quote on Translated S.r.l.'s own trust, security, or privacy pages. We reject certifications claimed only on third-party aggregators, on a cloud host's behalf, or by a similarly named company.

    Last verified 2026-07-06. Compliance changes over time. Always confirm directly with the vendor before relying on any certification for a purchasing or compliance decision.

    trust.translated.com

    > Browse all vendor trust reports