Security Policy

Last updated: February 2026

At Nativ, we take the security of your data seriously. This page outlines our security practices and the measures we take to protect your information.

Infrastructure Security

• Hosted on Google Cloud Platform with enterprise-grade security
• All data encrypted in transit (TLS 1.2+) and at rest
• Regular security audits and vulnerability assessments
• Automated backups with point-in-time recovery

Data Protection

• Content submitted for translation is processed and not retained beyond the session
• We do not use customer content to train our models without explicit consent
• Access controls and audit logging for all data access
• GDPR-compliant data processing agreements available

Application Security

• Authentication via Supabase with MFA support
• Role-based access control (RBAC)
• API key authentication with rate limiting
• Regular dependency updates and security patches

Reporting Vulnerabilities

If you discover a security vulnerability, please report it to founders@usenativ.com. We will respond within 48 hours.