Privacy & Security

Inquire
Privacy & Security
Inquire

1. Purpose and Core Principles

Maven International handles institutional, governmental, and commercial content that frequently requires controlled access, lawful processing, and clear accountability. This policy sets out the exact standards we apply to privacy and information security across our global operations.

2. Scope

This policy applies to all internal staff, project managers, freelance linguists, suppliers, and technical service providers engaged on Maven International assignments. It covers personal data, client content, project files, and any sensitive material processed in the course of our service delivery.

3. Secure Delivery Environment

Translation, review, and editing work are performed within a secure, browser-based CAT (Computer-Assisted Translation) environment.

  • Access Architecture: Access is strictly role-based and project-specific. Linguists work on segregated client assets without bulk downloading.
  • Data Restrictions: Routine off-platform copying of source or target material is prohibited.
  • Compliance: The platform we utilize for client-side document exchange is ISO-certified for information security, aligned with Section 17 of our Code of Ethics.

4. Access Control

Access to client content is granted on a strict need-to-know basis. Project managers, linguists, and reviewers are assigned only the minimum permissions required to fulfill their specific role on a given assignment. Access rights are systematically reviewed when projects close and are immediately revoked when a contract or engagement ends.

5. Confidentiality

All internal staff and freelance linguists are bound by strict confidentiality obligations covering project content, specialized terminology, client identity where required, and any reference material received. These obligations remain legally binding and survive the end of the user's engagement, in accordance with Section 13 of our Code of Ethics.

6. Data Handling and Retention

We acquire and retain only the specific personal data necessary for service delivery, contractor onboarding, and lawful record-keeping. Retention periods strictly follow client agreements and applicable statutory laws. Personal data is handled in line with our Data Protection page and all applicable regional data protection regulations.

7. Incident Reporting

Any suspected security incidents, vulnerabilities, or data breaches involving client content or personal data must be reported immediately through our internal escalation channels. Affected clients and relevant regulatory authorities will be notified promptly in strict alignment with our contractual and legal obligations.

8. Governance and Review

This policy is owned by the Director, with day-to-day oversight handled by Operations. It is reviewed annually to adapt to emerging security standards. Cross-referenced documents include our Code of Ethics, Modern Slavery Statement, Environmental Policy, Supplier Code of Conduct, and Data Protection page.

9. Information for Institutional Buyers

For institutional buyers, procurement teams, and donors—including UN agencies, government bodies, and NGOs—additional technical security documentation, completed due-diligence responses, and supplier compliance evidence are available on request.

Get In Touch

Inquire