Security, data and compliance in Foreign Language Translation Workflow for Intel

How Foreign Language Translation Workflow for Intel protects data and supports your compliance obligations.

Security controls

Nothing sent to outside services

The app sends nothing to translation services or other outside systems: it holds the workflow record, and your linguists translate outside it.

Access by product role

Viewers read, users enter and work requests, and product administrators change settings and export; a linguist can't change their own levels or record QA on their own translation.

A second linguist checks, people decide

Only the QA reviewer's own account or a product administrator can record a QA result, never the translator, and only a certifying linguist other than the translator can certify.

Encryption and keys

Material is encrypted at rest and in transit.

Complete audit trail

Every change, assignment, QA result, certification and export is recorded with the person and time, and the history can't be edited.

Unclassified only

Each request must be confirmed unclassified before it is saved, and classified material must never be entered, attached or pasted into comments.

Requirements it supports

• Executive Order 12333, United States Intelligence Activities
• DoD Manual 5240.01, Procedures Governing the Conduct of DoD Intelligence Activities
• Intelligence Community Directive 203, Analytic Standards
• Intelligence Community Directive 503, IC Information Technology Systems Security Risk Management
• Principles of Artificial Intelligence Ethics for the Intelligence Community
• NIST AI Risk Management Framework (AI RMF 1.0)

The product supports these requirements; meeting them remains your organization's responsibility.

Where it runs

• Unclassified records only: For unclassified administrative records only: requests must be confirmed unclassified, and no classified material belongs in records, comments or files.
• Connected use only: The app runs in Moraph Apps with a network connection; there is no disconnected or offline configuration, and linguists translate outside the app.
• Moraph cloud: Hosted on Cloudflare's network for unclassified administrative records.
• With a managed service: Optionally supported by a Moraph managed service for day-to-day administration.

Limitations

• It doesn't translate, transcribe or identify languages. Your linguists translate outside the app; it tracks the request, the people, the checks and the delivery.
• It doesn't test or certify proficiency. Levels are as recorded from your language program, and retest reminders depend on the test dates entered.
• It doesn't check translation quality itself. QA results and finding counts are what your reviewer records; the app enforces who may record them.
• It doesn't decide who translates. Suggestions follow your recorded levels, availability and workload, and a coordinator assigns.
• Effort estimates and at-risk flags come only from the word counts entered and the daily word rate your office sets; they are estimates, not a schedule.
• It doesn't receive material on its own. Requests come from staff or from your intake system through the Work API.
• It is not for classified material. Each request must be confirmed unclassified, and classified material must never be entered, attached or pasted into comments.
• Compliance with handling rules, including rules for information about US persons, remains your organization's responsibility. The app enforces the unclassified confirmation and its workflow rules, and records what happens.