Security / trust page — Phrase Localization Platform

Cited by

Facts read from this source

• ISO 27001 Report an error

  “Phrase a.s. (formerly Memsource a.s.) has been certified for ISO 27001 which proves that the information security management system (ISMS) which we have introduced conforms to the ISO standard.”

• SOC 2 Report an error

  “Phrase is SOC 2 Type I certified, with Type II certification expected in 2026. To request a copy of our SOC 2 Type I report, please contact us at security@phrase.com.”

• Provider Report an error

  “We use Amazon web services (AWS) as our cloud provider. AWS is compliant with a wide range of security standards including SOC 1/ISAE 3402, SOC 2, SOC 3, FISMA, DIACAP, and FedRAMP, PCI DSS Level 1, ISO 9001, ISO 27001, ISO 27017, and ISO 27018.”

• Payment provider pci Report an error

  “We use a third-party payment provider that is PCI DSS compliant and uses additional security mechanisms such as MasterCard SecureCode, Verified by VISA and SafeKey.”

• Pentest annual Report an error

  “Phrase services undergo third-party penetration tests each year. The tests are conducted in accordance with the OWASP ASVS standard.”

• Vulnerability disclosure Report an error

  “We operate a third-party hosted vulnerability disclosure program allowing independent researchers to responsibly disclose any vulnerabilities they may find in our applications and services.”

• Vulnerability scans Report an error

  “We use a third-party service for monthly automated vulnerability scans.”

• ISMS audits Report an error

  “Our information security management system is subject to annual internal audits and third-party audits verifying our compliance with the ISO 27001 standard.”

• Encryption at rest Report an error

  “All stored data is encrypted using Linux LUKS (aes-xts-plain64:sha256) or AWS encryption (AES256).”

• Locations Report an error

  “Phrase Platform is hosted on Amazon Web Services (AWS) platform. The physical servers are located in AWS data centers. Phrase Studio is hosted in Google Cloud Platform data centers. User content can also be found in backups, stored in AWS S3.”

• Environment separation Report an error

  “We maintain separate and distinct development, QA, pre-production and production environments.”

• Production access controls Report an error

  “To access the Phrase production environment, authorized and trained members of the Phrase Engineering team members use VPN and authenticate using unique strong passwords and 2FA.”

• Change management Report an error

  “Phrase uses a formalized IT change management process designed to ensure that changes are authorized and operate as intended.”

• Access principles Report an error

  “Principle of Least Privilege Access privileges for any user should be limited to resources absolutely essential for completion of assigned duties or functions, and nothing more.”

• Audit logs Report an error

  “Audit logs relating to a customer’s use of the platform are available to Phrase engineers and can be provided upon request.”

• Login history Report an error

  “Login history (including IP address, country and user agent identification) is available to each user and accessible via the UI.”

• Encryption in transit Report an error

  “Phrase uses industry standard encryption for data in transit. They are encrypted by TLS 1.2. The identity of the connection to Phrase is verified by a secure certification authority.”

• Backups Report an error

  “All data is backed up through near real-time incremental backups as well as daily full backups to a highly durable storage hosted in AWS S3. Backups are encrypted using Linux LUKS (aes-xts-plain64:sha256) or AWS encryption (AES256).”

• Rto Report an error

  “Phrase proved in tests to reach an 8 hour RTO for all components of its service.”

• Rpo Report an error

  “Phrase reaches a 4 hour RPO even in case of a catastrophic failure.”

• Physical security Report an error

  “Our premises are protected by a security service that is present 24/7. The entrance to the building is monitored by CCTV cameras.”

• Antimalware Report an error

  “A centrally managed and automatically updated anti-malware solution is installed on all computers. All devices have full disc encryption enabled and are protected by strong password and/or biometrics.”

• Background checks Report an error

  “All prospective Phrase employees and contractors are subject to background checks in line with privacy legislation. Security awareness training is part of our on-boarding process and is repeated annually.”

• Confidentiality Report an error

  “All employees and contractors are subject to confidentiality undertakings as part of their contractual arrangements.”

• Tenant architecture Report an error

  “We believe that Phrase architecture based on a public cloud service with multi-tenant model and logical access controls provides the best value and protection to confidential data of our customers such as translations, translation memory files, etc.”

Scores citing this record

• The App Developer Confidentiality of translated content
• The App Developer European sovereignty
• The Data Protection Officer Confidentiality of translated content
• The Data Protection Officer European sovereignty
• The In-House Document Translator Confidentiality of translated content
• The In-House Document Translator European sovereignty
• The E-Commerce Marketer Confidentiality of translated content
• The E-Commerce Marketer European sovereignty
• The Localization Manager Confidentiality of translated content
• The Localization Manager European sovereignty
• The Skeptic Confidentiality of translated content
• The Skeptic European sovereignty