Braivix has implemented the applicable requirements of ISO/IEC 27001:2022 and ISO/IEC 42001:2023 in its operations, with cybersecurity controls and data protection procedures aimed at compliance with Brazil's General Data Protection Law (LGPD).
The platform was developed by Opportunity Translations, which has provided translation services since 2006. It combines AI translation with safeguards for the information your company entrusts to the service. This includes contracts, reports, manuals and other documents requiring confidentiality.
Protection from the moment you upload
Data is encrypted in transit and at rest. Internal access is assigned individually, limited to each role's needs and reviewed periodically. Multifactor authentication reinforces the protection of administrative systems.
Files are made available through download links that expire. Production and testing environments remain separate, and real client documents are not used in testing. File contents are not recorded in application logs.
These measures reduce exposure and set clear limits on access and use.
Cybersecurity in everyday operations
Operations include activity monitoring, credential management, vulnerability tracking and component updates. The database is backed up automatically, with periodic restore tests.
An incident response procedure defines responsibilities, containment, impact assessment and communication with affected clients. This provides a structured approach to situations requiring a response.
Your documents and the use of AI
Braivix does not use submitted content or generated results for internal training of AI models.
Team management and consistent translations
Companies can organise users by department, allocate credits and track Braivix usage history. This helps them manage translation across departments and monitor credit usage.
Company glossaries and contextual instructions help keep terminology aligned with the business, especially in technical documents and internal materials.
LGPD and clear responsibilities
Data protection includes records of processing activities, privacy documentation and a channel for data subject requests.
When acting on a client's behalf, Braivix follows the instructions and responsibilities established in the data processing agreement. Retention and deletion policies, including applicable timeframes, are set out in the service documentation, so companies know how their information will be handled.
The role of ISO standards in security
ISO/IEC 27001:2022 sets requirements for information security management. ISO/IEC 42001:2023 sets requirements for an AI management system, including risks, responsibilities and continual improvement.
At Braivix, these requirements guide operations, the allocation of responsibilities and the ongoing review of security and AI management practices.
Documentation to support your decision
Your IT, legal or procurement team can request the security policy, information about data processing and supporting documentation for your internal approval process. Braivix also responds to security questionnaires relating to the service.
When a project needs human review, this can be arranged as a separate service with Opportunity Translations. The professionals involved sign confidentiality agreements (NDAs), and the scope is tailored to the client's needs.
Contact Opportunity Translations to request security documentation and a proposal for your company.