Question 1

Is Weglot SOC 2 compliant?

Accepted Answer

Weglot is SOC 2 Type II compliant. On SOC2C this listing is Listed.

Question 2

Is Weglot GDPR compliant?

Accepted Answer

According to Weglot's public trust center, Weglot is GDPR compliant. On SOC2C this listing is Listed.

Question 3

Is Weglot SOC 2 Type I or Type II?

Accepted Answer

Weglot is SOC 2 Type II compliant. A Type II report covers how security controls operated over a period (typically 3 to 12 months), a stronger signal than a point-in-time Type I.

Question 4

Can I use Weglot's SOC 2 for a vendor risk assessment?

Accepted Answer

Yes. Weglot's SOC 2 status, frameworks, auditor, and renewal timing are on SOC2C for vendor risk and security reviews. Request the underlying report through SOC2C to complete your third-party risk file.

Question 5

Is Weglot penetration tested?

Accepted Answer

Weglot hasn't listed its penetration testing on SOC2C yet. SOC 2 Type II programs typically include periodic third-party penetration tests; the company can add who performed theirs.

Question 6

Is Weglot secure?

Accepted Answer

Security isn't a single yes/no, but Weglot is SOC 2 Type II compliant and holds SOC 2 Type II, GDPR. SOC2C verifies its compliance posture and shows how strongly each fact is proven.

Question 7

Does Weglot have a bug bounty or vulnerability disclosure program?

Accepted Answer

Weglot hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@weglot.com or via a /security page.

Question 8

Who are Weglot's subprocessors?

Accepted Answer

Weglot lists 18 subprocessors on its trust center, including Amazon Web Services, Cloudflare, Datadog, DeepL, Stripe. Buyers use this for fourth-party risk review.

Question 9

Where does Weglot host or store data?

Accepted Answer

Weglot hosts on AWS, and handles Credit card information, Personal health information, User Data: Name, Email, IP. Data residency details are on its trust center.

Question 10

Where is Weglot's trust center or security page?

Accepted Answer

Weglot's trust center is at https://trust.weglot.com. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.

Question 11

Where can I find information about Weglot's uptime and downtimes?

Accepted Answer

We recommend checking out our Status Page. This will give you the ability to subscribe for updates, view uptimes, be informed of any outages, and view historical data.

Question 12

Where can I find Weglot's Data Processing Agreement?

Accepted Answer

Weglot's Data Processing Agreement (DPA) can be found here.

Question 13

Where are Weglot's servers located?

Accepted Answer

Weglot operates as a SaaS solution hosted on AWS, with data stored and processed on servers located in Europe by default. Enterprise clients may be hosted in the U.S. upon request.

Question 14

How does Weglot encrypt data in-transit?

Accepted Answer

Weglot enforces TLS 1.2+ for all data transmitted over insecure networks and implements HSTS to ensure maximum protection of data in transit.

Question 15

Does Weglot encrypt data at rest?

Accepted Answer

All datastores with customer data, in addition to S3 buckets, are encrypted at rest.

Question 16

How does Weglot handle secrets?

Accepted Answer

Encryption keys are managed via AWS Key Management System (KMS). Application secrets are encrypted and stored securely via AWS Secrets Manager and access to these values is strictly limited.

Question 17

Where can I find Weglot's Responsible Disclosure Policy?

Accepted Answer

Weglot's Responsible Disclosure Policy can be found here.

Question 18

How does Weglot leverage AI within the product?

Accepted Answer

Weglot does not train AI models on customer data. For more detailed information on our approach to leveraging AI, please visit our Commitment to Customers here.

Question 19

Does Weglot conduct penetration tests?

Accepted Answer

Weglot engages with one of the best penetration testing consulting firms in the industry at least annually. Our current preferred penetration testing partner is Astra Security.

Question 20

What happens to my data if I delete my account?

Accepted Answer

Weglot retains data for as long as the account is active. After account closure, data is retained for 30 days before permanent deletion. Data is deleted from backups within 2 days of deletion request.

Question 21

How is Weglot free? Do you sell our data to third parties?

Accepted Answer

We do not and will never sell your data to third parties. We provide the Weglot service free of charge because it drives usage and brand awareness.

Weglot

About

Compliance & infrastructure

Subprocessors

Compliance leadership

Penetration test

Recent updates

This listing is partial

Frequently asked

Business & Industrial peers that completed SOC 2

Newsworthy.ai

Octopus Deploy

1099-Prep

Ask Ai