Security

Every conversation, protected.Ready for your security review.

TranslateOS is HIPAA-compliant, real-time, over-the-phone translation. Your agents and members talk with confidence, and your data stays yours.

  • HITRUST CSF R2 certified
  • SOC 2 Type II
  • BAA with every customer
Book a demoRequest the Technical Guide
An older woman smiles as she talks on the phone in an armchair at home
Always private
This callProtected
  • Encrypted in transitTLS 1.2 or higher
  • Encrypted at restAES-256, with keys rotated automatically
  • Access by roleMulti-factor sign-in, minimum necessary
  • Access loggedLogged and auditable

Your data

Your data belongs to you.

Calls, transcripts, recordings, and PHI are never used to train or test translation models, and never sold.

  • Tested on synthetic data. Models are tested with synthetic healthcare scenarios, never with your calls.
  • Kept on your schedule. Records are stored to the retention you choose and deleted when the period ends.
  • Private from our team, too. Our National Command Center reviews quality scores and performance only. It never listens to calls or sees transcripts.

National Command CenterRetention options

A compliance lead smiles as she reviews a report at her desk in a bright office
One call recordStart to finish
  • Call endsRecord saved, encrypted with AES-256
  • Kept to your retention settingEvery access logged and auditable
  • Deleted when the period endsOn your schedule, not ours

Safeguards

Protection at every layer.

Layered controls protect identities, sessions, data, and day-to-day operations.

  • Identity and access. PINs for agents. Multi-factor sign-in and role-based access for portal users.
  • Sessions. Tokens expire after 15 minutes and rotate with each use.
  • Encryption. TLS 1.2+ in transit. AES-256 at rest, with keys rotated automatically.
  • Monitoring. Access to PHI is logged, and unusual activity is flagged.
Zero IT footprint.No app, no hardware, no SIP trunking, and no integration to secure on your side.

How it works

Access logToday
  • Signed in, multi-factor verifiedD. Carter · Administrator9:02 AM
  • Recording playedJ. Rivera · Compliance · Spanish call9:06 AM
  • PIN reset for Marcus D.D. Carter · Administrator10:15 AM
  • Failed sign-inOff-hours · 11:48 PMFlagged
Session secured15-minute token, rotated with each use

By the numbers

Security you can verify.

Strong protection on every call, verified by independent audits.

256-bit
AES encryption at restTLS 1.2+ protects data in transit
15min
Session token lifeRotated with each use
0
Customer calls used to train modelsOr to test them. Your data is never sold.

Completing a vendor security review? Request the Technical Guide for the details your review needs.

Request the Technical GuideBook a demo

FAQs

Questions about security.

See all FAQs
Is our data used to train AI models?

No. Customer calls, PHI, transcripts, and recordings are never used to train or test the translation models, and your data is never sold. Models are tested with synthetic healthcare scenarios. All data is owned by you.

Do your translation technology vendors sign BAAs?

Yes. Bloom maintains Business Associate Agreements with the translation technology vendors that may process protected health information. Every TranslateOS customer also has a BAA with Bloom.

How do you watch for unusual activity?

Sign-ins and access to protected information are logged and auditable. Anomaly detection flags events such as failed sign-ins and off-hours access, and Bloom maintains documented breach-response and notification procedures under its BAA.

Get started

Everything your security review needs.

Request the Technical Guide, or talk with our team. TranslateOS is live in one business day.

Request the Technical GuideBook a demo