Last Updated: 24 November 2015
The Translation Center Platform is operated by ProZ.com in accordance with the following procedures to enhance security:
ProZ.com, or an authorized third party, will monitor the Translation Center Platform for unauthorized intrusions. ProZ.com may analyze data collected by users' web browsers (e.g., device type, screen resolution, time zone, operating system version, browser type and version, system fonts, installed browser plug-ins, enabled MIME types, etc.) for security purposes, including to detect compromised browsers, to prevent fraudulent authentications, and to ensure that the Translation Center Platform functions properly.
All ProZ.com systems used in the provision of the Translation Center Platform, including network devices and operating systems, log information to their respective system log facility or a centralized server in order to enable security reviews and analysis.
ProZ.com maintains security incident management policies and procedures. ProZ.com promptly notifies impacted customers of any actual or reasonably suspected unauthorized disclosure of their respective customer data by ProZ.com or its agents of which ProZ.com becomes aware to the extent permitted by law.
Protected access to the Translation Center Platform requires authentication via one or more industry standard security mechanisms, such as username/password or OAuth2. Following successful authentication, a random session ID is generated and stored in the user's browser to preserve and track session state.
Production data centers used to provide the Translation Center Platform have access control systems. These systems permit only authorized personnel to have access to secure areas. These facilities are designed to withstand adverse weather and other reasonably predictable natural conditions, are secured by around-the-clock guards, two-factor access screening, including biometrics, and escort-controlled access, and are also supported by on-site back-up generators in the event of a power failure
All networking components and web servers are configured in a redundant configuration. All customer data submitted to the Translation Center Platform is stored on database servers with multiple replicated clusters for higher availability. All customer data submitted to the Translation Center Platform is automatically replicated on a near real-time basis to a secondary data center and is backed up on a regular basis and stored on backup media. Any backups are verified for integrity and stored in ProZ.com data centers.