Document Security & Privacy

At LegalTranslate UAE, we treat all customer documents, contracts, identity records, and legal files with the highest standard of confidentiality and technical protection.

Our infrastructure is built on a zero-public-access architecture. No uploaded file or completed certified translation is ever exposed to the public internet or accessible via unauthenticated URLs.

All document storage is isolated within private Supabase Storage buckets:

• Private Buckets Only: Direct file listing, public URL enumeration, and anonymous browsing are strictly disabled at the database and storage level.
• Short-Lived Signed URLs: Document access is granted solely through cryptographically signed URLs generated server-side with tight expiration windows (300 seconds).
• Encrypted at Rest & in Transit: All data in transit is protected by TLS 1.3 encryption, and files are encrypted at rest using AES-256 standard.

Our database enforces strict Row-Level Security (RLS) policies on every database table. Anonymous public visitors cannot read, query, or enumerate order records, quotes, customer emails, phone numbers, or uploaded files.

Administrative operations and document reviews are restricted to verified administrators with multi-factor authentication and server-side privilege validation.

All payment processing is isolated within Stripe’s Level 1 PCI-compliant infrastructure. LegalTranslate servers never handle, process, or store credit card numbers, CVVs, or sensitive cardholder data.

Certified legal translations are produced exclusively by licensed UAE legal translators bound by professional legal ethics and strict non-disclosure agreements. Documents are shared only with the assigned translator strictly for the purpose of translation fulfilment.