GlobalAnnotate logoGlobalAnnotate

Security & Confidentiality

Your confidential work, handled confidentially.

NDAs with every linguist, least-privilege access, encrypted transfer, and defined retention and deletion — with careful handling of medical, legal, and personal data.

How we protect your work

Confidentiality built into the workflow.

NDAs with everyone

Every in-house team member and network linguist signs a non-disclosure agreement before receiving any client material. No exceptions.

Least-privilege access

Only the project lead and the linguists assigned to a project can access its files. Access is granted per project and removed when the project closes.

Encrypted transfer

Files are exchanged and stored over encrypted connections (TLS). Sensitive engagements use secure, access-controlled transfer rather than open email attachments.

Retention & deletion

Project files are kept only as long as needed to deliver and support the work. Unless a contract requires otherwise, they are deleted or anonymized after the project closes.

The confidential-work workflow

From NDA to deletion.

01

NDA & scoping

We sign your NDA (or ours) and scope the work, confirming data sensitivity, access needs, and any regulatory constraints up front.

02

Secure intake

Files are received over an encrypted, access-controlled channel and placed in a project workspace visible only to the assigned team.

03

Need-to-know delivery

Vetted, NDA-bound linguists and reviewers work the project under least-privilege access. Sensitive material is routed to specialists for that domain.

04

Handover & deletion

We deliver through the agreed secure channel, then delete or anonymize project files per the contract and our retention policy.

Sensitive data

Medical, legal, and personal data.

Medical & PHI

Clinical and patient material is handled by specialists under the engagement's confidentiality and data-protection terms, with tighter access and retention controls. We support client DPAs.

Personal data (PII)

Personal identifiers are processed on the client's instructions as a processor, protected by NDAs, least-privilege access, and defined retention — see our Privacy Policy.

Legal & regulated

Contracts, filings, and regulated documents are routed to subject-matter linguists and kept confidential, with certified translation available on request.

Standards & certifications

Honest about where we are.

We run an ISO 17100-aligned quality management system and apply recognized security practices. We are transparent about what is in place today and what is planned.

  • In place

    ISO 17100-aligned QMS

    Our quality process follows an ISO 17100-aligned workflow. Not a certification.

  • In place

    NDAs & access control

    Signed NDAs, least-privilege access, and encrypted transfer on every engagement.

  • In progress

    SOC 2 Type 1

    Planned. We are working toward SOC 2 Type 1; not yet attested.

  • Planned

    ISO 27001 / ISO 13485

    Not certified. On our roadmap as we grow enterprise and life-sciences work.

Security questionnaires & due diligence

Completing a vendor security assessment or need our data-handling details, NDA, or DPA? Email [email protected] and we'll respond promptly.

Contact us

Ready to grow globally?

Tell us about your project and we'll get back to you within one business day.