Trust
Security in facts, not badges
EU-hosted on Azure West Europe, operated by Logoteknia Oy in Finland. No rented certification logos, just what the platform actually does with your accounts, your data, and your text, stated plainly.
Accounts
Account security
Passwords are hashed with Argon2. Sessions ride refresh tokens in HTTP-only cookies, tracked per device so one stolen laptop doesn't become every session. Password policy, history, and reset flows are enforced server-side.
- Argon2 password hashing
- HTTP-only cookie sessions
- Per-device sessions
- Email verification
- Login-attempt tracking
Platform
Access control and identifiers
Every endpoint checks roles (project manager, translator, reviewer, proofreader), and external identifiers are non-enumerable UUIDs, so resource URLs can't be guessed by counting.
- Role-based access control
- UUIDv7 identifiers
- API keys, revocable per consumer
Your text
Sensitive content never meets the MT engine raw
Entity protection masks brand names, product codes, IBANs, and URLs before machine translation, restores them verbatim after, and audits the result: a dropped or leaked entity is a flagged QA issue, not a silent accident.
Hosting & compliance
EU-hosted, honestly described
The platform runs on Azure in West Europe and is operated by Logoteknia Oy, a Finnish company: your data and the company responsible for it are both under EU jurisdiction, with GDPR-aligned practices built into the architecture. We hold no certification logos and imply none: facts, not badges.
- Azure West Europe
- Logoteknia Oy (Finland)
- GDPR-aligned practices
- No rented badges
Disclosure
Found a vulnerability?
We practice coordinated disclosure. Report security issues through the contact page and give us reasonable time to fix before publishing. Machine-readable details live in /.well-known/security.txt.
FAQ
Frequently asked questions
Questions about data handling?
Ask us directly: real answers beat marketing pages.