Trust reference
Security & compliance
ProsaBridge translates documents that are often unpublished, embargoed, or sensitive. This page states plainly where those documents live, who can reach them, and which rules bind the pipeline. For contractual detail, the data processing agreement linked below is the authoritative document.
- Core hosting
- Frankfurt, Germany
- Live job data
- Removed within 14 days after completion
- AI training on your documents
- Never
- Access
- SSO via Microsoft Entra ID
Core hosting in the EU
The core application and database run in Frankfurt, Germany. Selected subprocessors handle authentication, edge delivery, email, storage, and AI requests in the EU, the United States, or global infrastructure. Their locations and transfer status are listed in the current subprocessor register.
A short document lifecycle
Live source documents, generated translations, storage objects, and related job records are removed within 14 days after a job completes. If a user includes passage and source evidence in a feedback report, that snapshot remains until the report is resolved or for at most 30 days. Hourly database backups rotate after 14 days, so a previously live database copy can outlast the live-row sweep.
No AI training on your documents
Customer documents are not used to train or improve ProsaBridge's or a third party's AI models. This is a no-training commitment, not a blanket zero-data-retention promise: provider-specific storage, deletion, and logging terms are recorded in the subprocessor register.
GDPR
A data processing agreement defines the GDPR roles and obligations for customer processing. The current subprocessor register is public and records each provider, location, transfer basis, and any unresolved limitation — including the present email-provider gap.
EU AI Act
The pipeline is built to the transparency and copyright requirements of the EU AI Act, including the handling of copyrighted source material during translation.
Access control
Sign-in uses Microsoft Entra ID with single sign-on; there is no self-service sign-up. A new organization is provisioned automatically on first login but stays inactive until our team verifies and activates it.