Based on the Data Processing Agreement · Last updated 7 November 2026

Security & privacy

Official documents carry personal and confidential information. Here we explain where your documents are processed, who can see them and when they are deleted. Everything on this page is set out in the Data Processing Agreement.

Download PDF (Turkish)Data Processing Agreement
In brief

How your documents are protected

  • Not used to train AI

    Your documents are processed only for your translation job. Sealingo does not train models on them, and under the AI provider's commercial terms, content sent to the provider is not used for training either.

  • Deleted on your schedule, with a deletion record

    Documents are permanently deleted after the period you choose for your account: immediately on approval, or after 7, 30, 60 or 90 days. You can also delete a job yourself at any time; the record of each deletion can be downloaded from the job page.

  • Every account separate, confidential jobs even more so

    Each user can access only their own account's jobs; this separation is enforced at the database level. A job marked confidential is visible within your team only to the person who created it and the account admin. A locked job opens only with a two-step verification code.

  • Every job runs in an isolated environment

    The translation engine processes each job in a separate environment. It contains only that job's files and has no access to other jobs, the internet or access keys.

  • Encrypted in transit and at rest

    Connections are encrypted with HTTPS; the database and file storage are encrypted at rest. Files are kept in private storage, and download links are valid for 60 seconds.

  • Roles, sign-in rules and access log

    The account admin can require two-step verification, sign out inactive sessions, restrict sign-in to the company's IP addresses, and see who opened or downloaded which document and when.

A document's journey

From upload to deletion

  1. Upload

    Frankfurt, Germany

    The document is uploaded over an encrypted connection to private file storage.

  2. Preparation

    Frankfurt, Germany

    The translation engine converts the document into page images in an isolated environment set aside for that job.

  3. AI

    USA

    Only the content the job requires is sent for reading, translation and review. Sealingo deletes the processing record there as soon as each step finishes.

  4. Delivery

    Your dashboard

    The translation is available only to your account's users, and every view or download is logged. The translation without the DRAFT watermark can be downloaded after approval.

  5. Deletion

    Automatic

    When the period ends, the source document, page images, working files and translation are permanently deleted. For invoicing, only the job number, date, language and credit record remain; these contain no document content.

Infrastructure

Our infrastructure providers' security certifications

All four infrastructure providers that process your documents are independently audited. The certifications belong to the providers, not to Sealingo; you can view each one on the provider's trust page. The full list and its terms are in Annex 2 of the Data Processing Agreement.

Partner translation agencies

Turkey

Only for jobs where sworn & notarized delivery is selected: for the sworn translator's review, signature and stamp. They are bound by the partner agreement: confidentiality, access only to the assigned job, deletion no later than 7 days after delivery, and a locked cabinet.

SOC 2 Type II
A report in which an independent auditor examines whether the company's security, access and confidentiality controls were actually in operation over a period of months.
ISO 27001
International certification for an information security management system, issued by an independent certification body.
ISO/IEC 42001
International certification for the responsible and secure management of AI systems.
In the agreement

Our written commitments

The Data Processing Agreement is part of the service agreement and is accepted when the account is created. Clause numbers link to the agreement.

  • Roles

    DPA 1.1, 4.1

    You are the data controller for the personal data in your documents, and Sealingo is the data processor. We process documents only on your instructions and only for translation; we do not use them for our own purposes, sell them or disclose them to anyone.

  • Data breach

    DPA 7.1

    If we learn of a breach affecting your documents, we notify you within 48 hours at the latest.

  • Change of subprocessor

    DPA 5.2

    We notify you at least 15 days before adding a new infrastructure provider. You can object; if the objection cannot be resolved, you can terminate the agreement and get a refund for your unused credits.

  • Information and audit

    DPA 4.8

    You can request in writing the information and documents showing that we comply with the agreement. Once a year, with 30 days' notice, you can carry out an on-site audit with an independent auditor.

  • Confidentiality obligation

    DPA 4.4

    Sealingo staff who can access documents are under a written confidentiality obligation; their access is limited to what their role requires.

  • Deletion record

    DPA 8.5

    The record of each deletion can be downloaded from the job page; on request, we also confirm it in writing.

FAQ

Security questions and answers

Are our documents used to train AI models?
No. Sealingo processes documents only for your translation job and does not train models on them. Under the commercial terms of our AI provider, Anthropic, content sent to the provider is not used for model training either. This is set out in clause 4.2 of the Data Processing Agreement.
Where are documents processed and stored?
File storage, the database and the translation engine run in Germany (Frankfurt). For reading, translation and review, content is sent to the AI provider in the USA. This means documents are processed outside Turkey, in the European Union and the USA. The rules for transfers abroad are set out in clause 6 of the Data Processing Agreement.
How long are documents kept?
For the period you choose for your account: they are permanently deleted immediately on approval, or 7, 30, 60 or 90 days after the job closes (30 days by default). With "immediately on approval", source documents are deleted on approval and the translation 24 hours later, so it can be downloaded. Your account admin can choose a longer period (90 days or 1 year) for a folder; this applies only to the jobs in that folder. With sworn & notarized delivery, documents are not deleted while delivery is in progress (up to 90 days from job completion). Deletion is automatic.
Can we delete documents ourselves?
Yes. The person who created a job or the account admin can delete that job's documents from the job page at any time, and the account admin can delete the documents of all jobs from settings (except jobs in progress or under review). Your users can also delete their own Seal conversations. The record of each deletion can be downloaded from the job page.
Can Sealingo staff see our documents?
Sealingo's admin panel does not show document content or the names and ID numbers in documents. Access to the translation engine and servers is limited to authorized technical staff. Everyone who could access documents is under a written confidentiality obligation, and their access is limited to what their role requires.
Can another customer see our documents?
No. Customer data is separated by database-level security rules; each user can access only their own account's records and files. The translation engine also processes each job in a separate environment that cannot reach other jobs' files. Your account and folder glossaries are used only in your jobs.
Who sees what on our team?
A business account has at most 3 users, each with a role: admin, translator or uploader. Only translators and admins can approve and make decisions; billing, team and settings are available only to the admin. The account admin can require two-step verification for everyone on the team; a member without it then cannot access the account until they set it up. A job marked confidential is visible within the team only to the person who created it and the account admin.
Can we restrict sign-in to our company network?
Yes. In account settings, the account admin can allow sign-in only from the company's IP addresses; sessions from other addresses are signed out. They can also have inactive sessions close after a period between 15 minutes and 4 hours.
If our password is stolen, can our documents be opened?
You can lock any job you choose. A locked job's documents (source, translation, report and flagged items) open only with the code from the two-step verification app; the account password does not open them. Once the code is entered, the lock stays open for 10 minutes in that session and then closes on its own. Two-step verification newly added to an account cannot unlock jobs until 24 hours have passed, so someone who obtains the password cannot add their own phone and open documents right away.
Can we see who opened our documents?
Yes. Your account admin can see who on the team opened or downloaded which document and when, on the Team page and on each job's page; with sworn & notarized delivery, the partner agency's downloads also appear under the agency's name. For jobs that have started, document links are generated only by Sealingo's server, after it writes the log entry. Logs are kept for 2 years.
What is sent to the AI provider, and what remains there?
Only the content the job requires: page images and text. Sealingo deletes the processing record there as soon as each job step finishes. Any other copies that may arise in the provider's systems during processing are deleted within the periods in the provider's agreement.
What can Seal access?
Seal reads only the records that the user asking the question can see, and never changes anything on its own. Seal conversations count as document data: like your documents, they are deleted after the period you choose (at least 7 days), counted from the last message.
What happens if there is a data breach?
If we learn of a breach affecting your documents, we notify you within 48 hours at the latest, stating what happened, which data was affected, the measures taken and a contact person. Under KVKK (Turkish Personal Data Protection Law), notifying the Board and the data subjects is your obligation as the data controller (the Board within 72 hours); we provide the information you need for this.
Who is the data controller under KVKK?
You are the data controller for the personal data in your documents, and Sealingo is the data processor. The Data Processing Agreement sets up this relationship under Article 12 of KVKK and is an integral part of the service agreement. Informing data subjects is your obligation; this includes informing them that the documents will be translated using a software service that involves AI and will be processed abroad. For individual accounts opened for personal use (students, etc.), Sealingo is the data controller for your documents; the KVKK privacy notice applies instead of the Data Processing Agreement.
Do you have a security certification?
Sealingo does not yet have its own ISO 27001 or SOC 2 certification. The four infrastructure providers that process your documents are independently audited; their certifications and links are in the Infrastructure section of this page. The technical and organizational measures we apply are listed in Annex 1 of the Data Processing Agreement.
Can we carry out an audit?
Yes. You can request in writing, at any time, the information and documents showing that we comply with the agreement. An on-site audit can be carried out once a year, with at least 30 days' notice, by an independent auditor bound by confidentiality, at your expense. These limits do not apply to a request from the Board.
Can we send a non-disclosure agreement (NDA) or a security questionnaire?
Yes. Send your NDA, vendor security questionnaire or questions to hello@sealingo.co; we will review them and reply in writing.
With sworn & notarized delivery, who handles my document?
Only if you choose this delivery are documents transferred to the partner translation agency in Turkey. The agency sees only the job assigned to it, not your account or billing details; it deletes the files no later than 7 days after delivery and keeps printed documents in a locked cabinet. Original documents are carried by courier in a sealed envelope marked with the job number; the courier does not see the contents. For notarized delivery, the notary is an independent data controller by virtue of its legal duties.
What happens to our data if we stop using the service?
When the service agreement ends, your documents, account glossary and folders are deleted within 30 days. You need to download your delivery files before then; we do not offer a separate archive service.

Have a security question?

Send us your vendor security questionnaire, NDA or questions; we will reply in writing. If you notice a security vulnerability, please write to the same address.

hello@sealingo.co