Security / trust page — Locize

Cited by

Facts read from this source

• Provider Report an error

  “Customer data (translations, project metadata, account information) is hosted on Amazon Web Services (AWS) in Ireland.”

• Disaster recovery storage Report an error

  “Encrypted disaster-recovery copies of translation namespaces and project configurations are additionally kept off-AWS on BunnyCDN Storage (EU), under encryption keys held offline by Locize”

• Cdn Report an error

  “Published translations are delivered through CDNs with edge locations worldwide (BunnyCDN for the Standard CDN, AWS CloudFront for the Pro CDN).”

• Operating entity Report an error

  “Locize is operated by a Swiss-registered company.”

• Copyright entity Report an error

  “© 2026 inweso Ltd liab. Co. All Rights Reserved.”

• Documents Report an error

  “Terms Privacy DPA (GDPR/FADP) CCPA terms”

• Zero trust Report an error

  “We follow a Zero Trust Architecture mindset: “never trust, always verify”, with strict identity verification and continuous authentication.”

• Training and access Report an error

  “Ongoing security awareness training for employees and role-specific training where needed. Access control based on least privilege, with regular reviews and timely revocation/updates. Strong authentication mechanisms (including MFA) for internal systems where applicable. An incident response process to address, investigate, and remediate security incidents.”

• MFA options Report an error

  “Multi-factor authentication: TOTP (authenticator apps), WebAuthn (FIDO2 hardware keys), and YubiKey”

• SSO SAML Report an error

  “Single Sign-On via SAML 2.0”

• API authentication Report an error

  “REST API authentication with API token permission control”

• Role based permissions Report an error

  “Role-based permissions”

• Backups versioning Report an error

  “Backups and versioning”

• Encryption at rest Report an error

  “Authenticated encryption at rest for personal data and stored third-party API credentials”

• Signing key rotation Report an error

  “Versioned signing keys for sessions, supporting zero-downtime rotation Periodic credential rotation across vendor integrations and signing keys”

• Vendor risk management Report an error

  “We maintain vendor risk management practices and review third parties used to deliver the service. A list of sub-processors and related privacy details is available in our Privacy policy.”

• Payments pci Report an error

  “Payments are processed by our partner Stripe, which is compliant with PCI Security Standards.”

• Customer data access Report an error

  “Access to customer data is limited to authorized employees who require it for their job (for example support).”

• Disaster recovery plan Report an error

  “We maintain and regularly review a Disaster Recovery Plan and a Business Continuity Plan.”

• Dr snapshot retention Report an error

  “we keep encrypted, off-AWS disaster-recovery snapshots of translation namespaces, project configurations, and project-administrator contact details on BunnyCDN Storage (EU). They are encrypted with keys held only by Locize (BunnyCDN stores only ciphertext and cannot read them) and retained on a rolling multi-week schedule”

• Vulnerability reporting Report an error

  “If you have questions about security at Locize or would like to submit a vulnerability report, email support@locize.com. Security-related reports are treated with high priority.”

Scores citing this record

• The App Developer Confidentiality of translated content
• The App Developer European sovereignty
• The Data Protection Officer Confidentiality of translated content
• The Data Protection Officer European sovereignty
• The In-House Document Translator Integrations, file formats & developer tools
• The In-House Document Translator Confidentiality of translated content
• The In-House Document Translator European sovereignty
• The E-Commerce Marketer Confidentiality of translated content
• The E-Commerce Marketer European sovereignty
• The Localization Manager Integrations, file formats & developer tools
• The Localization Manager Confidentiality of translated content
• The Localization Manager European sovereignty
• The Skeptic Integrations, file formats & developer tools
• The Skeptic Confidentiality of translated content
• The Skeptic European sovereignty