Security
Security
Agencies hold sensitive documents, personal details and bank accounts. This page explains how LinguisTriks keeps data separate, controls access and records changes.
Data
A separate database for each agency
Every agency runs on its own database. Your clients, linguists, prices and documents are never stored alongside another agency's, and the data is yours to export whenever you want it.
- A separate database for every agency
- Documents kept in secure cloud storage
- Daily database backups
- Export your data at any time
Access
Sign-in and access
Staff can sign in with their Microsoft work accounts, and you can switch passwords off entirely. Clients and linguists use their own portals, or secure one-time links for single actions such as accepting a job.
- Microsoft Entra ID single sign-on
- Optional sign-in with Microsoft only
- Staff roles: view or edit rights per part of the portal, with money figures shown by role
- Offboarding hands work over before access is removed
Passwords and permissions
Passwords and permissions
Passwords are stored only as salted hashes, so nobody can read them, and links to set or reset a password work once. Settings for payments, sign-in and email are for admins, saved keys are never shown again, and only the staff you choose can release linguist payments.
- Salted password hashes, never plain text
- Single-use set-password links
- Admin-only payment, sign-in and email settings
- A Can pay linguists permission nobody can give themselves
Audit
Audit trail
Sign-ins, actions and field-level changes on quotes, projects and orders are recorded with who made them and when. AI activity has its own usage log.
- Activity log across the platform
- Field-level change history
- Sign-in audit
- AI usage log
Payments
Client payments and linguist payments
Client card payments go through Stripe or PayPal, so card details never touch your portal. Linguist payouts through Wise, Airwallex and PayPal carry a single safety key per payment, a payment already on its way can't be sent again from any button, and payment notifications are checked before anything changes.
- Hosted card payments with Stripe and PayPal
- Idempotent payouts that can't pay twice
- Payment amounts checked against what was due
- Failed transfers returned for review
AI
AI tools
AI features stay off until an admin switches them on. They can only use approved tools, never open database access, and anything that sends a message or changes data waits for a person to confirm.
- Off by default, switched on per agency
- Approved tools only
- Human confirmation for every change
- Every AI call logged
Have a security questionnaire?
Send it to us and we will complete it, or talk your team or your clients through how the platform handles their data.