Security at Ravira
Privacy-First Translation You Can Trust
Our Commitment to Security
At Ravira, security and privacy are the foundation of everything we build. Your translation content is processed in memory on our systems and is not saved to our database, backups or logs. The only exception is an interrupted document translation: the partial result is kept for up to 60 minutes so you can recover it. Our AI infrastructure provider briefly retains processed text (up to 7 days) solely for abuse prevention, then auto-deletes it. It is never used for training.
What Makes Us Different
Traditional Services
Your Text → Server → Database Storage → Translation → Stored Forever
Vulnerable to breaches, subpoenas, insider threats
Ravira
Your Text → Memory → Translation → Delivered to You → Memory Cleared
Not saved to our database, backups or logs. Provider retains masked text briefly (up to 7 days) for abuse prevention only.
Technical Implementation
Secure Upload
Your text arrives via encrypted HTTPS (TLS 1.3) and is processed in server memory. It is not written to our database, backups or logs.
Data Protection
Automatic detection of sensitive data (emails, phones, credit cards, IDs). Replaced with placeholders before processing.
Translation
PII-masked text is routed through our AI infrastructure provider, which retains it up to 7 days solely for abuse prevention, then auto-deletes. Sensitive identifiers never leave our servers in raw form.
Restoration
Placeholders replaced with original values. Translation delivered via encrypted connection.
Cleanup
Once the translation is delivered, the content is released from memory. Short texts are typically processed in seconds; large documents take longer.
Security Measures
Encryption
- TLS 1.3 for all connections
- AES-256 database encryption
- bcrypt password hashing
Authentication
- Optional email verification code (2FA) for email and password sign-in
- 30-day session expiry
- OAuth support (Google)
Infrastructure
- Hetzner cloud servers
- EU-region hosting (GDPR)
- Automated monitoring
Protection
- Rate limiting (abuse prevention)
- Input validation
- CSRF protection
Compliance & Standards
ISO 27001 - Self-Assessment Status
We have completed an internal security self-assessment aligned with ISO 27001 controls, with no open items from our internal review. This is not a certified audit result.
What We Do NOT Collect
Not Stored
- ❌ Translation content (except an interrupted document result, kept up to 60 minutes)
- ❌ File upload history
- ❌ File names (except with an interrupted document result, up to 60 minutes)
- ❌ Translation history
- ❌ Behavioral tracking
We Collect (Minimal)
- ✓ Email (for login)
- ✓ Password hash (cannot be reversed)
- ✓ Usage metadata (character counts)
- ✓ Stripe reference (not card details)
Contact
Security
security@ravira.dev
Privacy
privacy@ravira.dev
Support
support@ravira.dev
Start translating
Translate across 108 languages, with terminology for 20 domains.