Trust reference
Security & compliance
ProsaBridge translates documents that are often unpublished, embargoed, or sensitive. This page states plainly where those documents live, who can reach them, and which rules bind the pipeline. For contractual detail, the data processing agreement linked below is the authoritative document.
- Application and database
- Frankfurt, Germany
- Live job data
- Removed within 14 days after completion
- AI training on your documents
- Never
- Access
- Microsoft Entra ID in the add-in, email and password in the web app
Where your documents are processed
The application and database run on Oracle Cloud Infrastructure in Frankfurt, Germany. Uploaded documents and finished translations are stored in Cloudflare R2 under EU jurisdiction. AI requests go to AWS Bedrock in the Frankfurt AWS region. Other subprocessors handle sign-in, website delivery, and email. The current subprocessor register lists the location and transfer status of every provider.
A short document lifecycle
Live source documents, generated translations, storage objects, and related job records are removed within 14 days after a job completes. If a user includes passage and source evidence in a feedback report, that snapshot remains until the report is resolved or for at most 30 days. Hourly database backups rotate after 14 days, so a previously live database copy can outlast the live-row sweep.
No AI training on your documents
Customer documents are not used to train or improve ProsaBridge's or a third party's AI models. This is a no-training commitment, not a blanket zero-data-retention promise: provider-specific storage, deletion, and logging terms are recorded in the subprocessor register.
AI requests at AWS
For high availability, AWS distributes AI requests across its data centers, including outside the EU. The data stays on the AWS network and is not used for training.
GDPR
A data processing agreement defines the GDPR roles and obligations for customer processing. The current subprocessor register is public and records each provider, location, transfer basis, and any unresolved limitation.
EU AI Act
Translations produced by ProsaBridge are AI-generated content within the meaning of Art. 50 of the EU AI Act, and our terms of use say so explicitly. Every translated file carries a machine-readable AI-generated marking: Word and LibreOffice files in their document properties, InDesign files (IDML) in their metadata. An uploaded PDF comes back as a Word file with the same marking. Whether a published work must also be labeled for readers, for example in its imprint, is for the customer to check.
Access control
In the Word add-in, sign-in uses Microsoft Entra ID with single sign-on. A new organization is provisioned automatically on first sign-in but stays inactive until our team verifies and activates it. In the web app, people sign in with their email address and a password and can turn on two-step sign-in with an authenticator app. Web app accounts are created only by invitation. Neither way offers self-service sign-up.