Data Processing Agreement

Last updated: 2026-07-10

This Data Processing Agreement ("DPA") describes how VeriFluent processes personal data on behalf of business customers when providing the Services. It forms part of the agreement between VeriFluent and the customer. For enterprise engagements a counter-signed DPA can be provided on request; the terms below reflect how the platform actually operates.

Roles Of The Parties

For the personal data contained in documents and workspace records, the customer is the data controller and VeriFluent is the data processor. VeriFluent processes that data only on the customer's documented instructions — which, at minimum, are the instructions given by using the Services — and for no other purpose.

Scope And Purpose Of Processing

VeriFluent processes the customer's content solely to provide the translation Services: profiling a document, translating it, running quality and terminology review, delivering the result, and operating, securing and supporting the platform. The subject matter is document translation; the data types and data subjects are whatever the customer chooses to include in the documents it uploads. Processing continues for the duration of the agreement.

No Training On Customer Data

VeriFluent does not use customer content to train, fine-tune or improve any AI model. Content is processed to fulfil the specific translation job and is not repurposed. This constraint flows down to the AI providers used to perform translation, which process content to complete the job only.

Sub-Processors

VeriFluent engages a limited set of sub-processors to deliver the Services — including AI translation providers, cloud hosting and storage, and a payment processor for purchases. Each is bound to obligations that protect customer data consistent with this DPA. VeriFluent remains responsible for its sub-processors' performance and will make the current list available on request and give notice of material changes.

Security Measures

VeriFluent maintains technical and organizational measures appropriate to the risk, including strict per-tenant isolation across every query and storage operation, role-based access control, watermarked view-only previews so original bytes are not exposed, write-only secret handling through a secret manager, encryption in transit, and tenant-scoped audit logging of meaningful actions. Access to production systems is limited to the personnel who need it.

Data Residency

Customer documents are stored and processed on UAE-based infrastructure, providing genuine in-country data residency. Where any processing by an AI provider is required to fulfil a translation, it is limited to completing that job.

Retention, Return And Deletion

VeriFluent retains customer content in line with the retention and legal-hold settings applicable to the customer's documents. On termination, and subject to those settings and any legal-hold in force, customer content is deleted or returned in accordance with the then-current retention terms. Certain records may be retained where required by law.

Assistance And Breach Notification

VeriFluent will provide reasonable assistance to the customer for data-subject requests, data protection impact assessments and consultations with authorities, taking account of the nature of processing and the information available. VeriFluent will notify the customer without undue delay after becoming aware of a personal-data breach affecting the customer's content. Contact support@verifluent.ai for DPA requests.

Explore more

Common questions

Is VeriFluent a controller or a processor?
For the personal data in your documents and workspace records, you are the controller and VeriFluent is the processor, acting only on your documented instructions to provide the Services.
Can we get a signed copy of the DPA?
Yes. A counter-signed DPA can be provided for enterprise engagements on request — contact support@verifluent.ai.

See your own document translated

Bring a real document and we will translate it with the layout fully preserved.

Request A Demo