Legal, Security, and Data Storage

Security Statement

Introduction

The privacy and security of user's data in Memsource is our utmost priority. Traditionally, data, including confidential information, such as translations, translation memory files, terminology, etc. have been transmitted by email (mostly unencrypted) in the translation industry. We believe that centralizing confidential data in a single location, such as Memsource, and only providing password-protected access to it, is a step forward in data security for the translation industry.

Certifications

Memsource has been certified for ISO 27001 which proves that the information security management system which we have introduced conforms to the ISO standard. The Memsource application has also been audited by an independent security consultancy following the OWASP ASVS standard.

The ISO certificate was renewed for years 2017-2020.

Data Privacy

Data that you upload to Memsource is completely private. It is only reserved for you and your organization's users which you create and allow to have access to the data. The privacy of your data is guaranteed by technical means as well as by Memsource Terms of Service.

Data Protection

The data in your Memsource account is protected. Only users that you have provided the appropriate user rights have access to your content. Instead of emailing the data, users access your data upon authenticating them in Memsource. All user actions are logged by Memsource Technologies.

All the stored data are encrypted using Linux LUKS (aes-xts-plain64:sha256) or using AWS encryption (AES256).

Encrypted Communication

All communication is encrypted by default in Memsource. This is true for the communication between Memsource servers and the user's web browser as well as the desktop Memsource Editor.

The connection to Memsource is encrypted using the latest security standards and best practices. The connection uses TLS and is encrypted using AES_128_GCM and uses ECDHE_RSA as the key exchange mechanism (TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256). The identity of the connection to Memsource is verified by a secure certification authority.

Technology

Memsource deploys the latest internet technologies to provide maximum security to Memsource users. Memsource stores user data in a highly secured location uses an advanced firewall and additional security technology to prevent unauthorized access to user data.

Redundancy and Backups

Redundant architecture ensures high service up-time. All data is backed up through near real-time incremental backups as well as daily full backups to a highly durable storage.

Memsource Service Status

Users can check the status of Memsource, Memsource Web Editor and Memsource APIs from our new Status Page. This page also notifies users about any incidents we deal with. There is a possibility to subscribe and receive notifications of incidents via e-mail.

Questions?

Contact Memsource Support if you have any additional questions about security.