End-to-end encrypted
Audio and video are encrypted on the end devices and only decrypted there. Our servers carry ciphertext only. lingomatch cannot listen in on conversations either.
Our serverssee noconversation.
Matching a request always runs through our platform. The other two layers, signalling and the media stream, move to you depending on the model. The same applies in every model: keys are generated on the end devices and never leave them. Our servers carry ciphertext only.
Choose an operating model
Your station uses the platform as a tenant on shared infrastructure in Germany. The fastest way to get started, with no groundwork of your own.
Matching the requestAlways with lingomatch
Signalling and key exchangeOur infrastructure
Media streamOver our relay
KeysOn the end devices only
Nine points
What your IT department asks first.
Each point worded so that it can be checked, not merely believed.
Confidentiality
Operation
Servers in Germany
Central components run in German data centres with recognised certifications. No transfer of core data to third countries. Entirely within your own authority network on request.
Recording
Nothing is recorded
Before every join, a full-screen notice on Section 201 of the German Criminal Code appears, which all participants must confirm. Without confirmation no connection is established. The confirmation is logged.
Processing
Content is unreadable to us
Audio and video are encrypted on the end devices. Our servers carry ciphertext. Any analysis of the content, by whoever or whatever, is therefore technically impossible.
Traceability
Who and when is logged
Who was connected with whom, when, for how long and through which allocation mode is recorded. The content of conversations is not. Interpreters have their own audit log for their own cases.
Access
Two-factor authentication
Accounts can be secured with a second factor. For authority accounts, two-factor sign-in can be made mandatory.
Identity
Verified before anyone joins
Automated identity verification through a specialised European provider, plus checked qualification documents and a verified profile photo taken during the check.
Connection drop
Rejoining from both sides
If the connection drops, the room can be re-entered from both sides, by the station and by the interpreter. The case stays the same and no new request is created.
Data subject rights
Access and export
Users can export their stored data as an archive. The platform is designed to handle access and erasure requests under the GDPR.
Under the bonnet
Not a bought-in video module.
The connection runs over infrastructure we operate ourselves, not over a provider whose terms we do not control.
Architecture
Signalling
Connection setup, room management and key exchange. This layer knows the metadata but not the content of conversations. It is the layer that moves to you in the dedicated model.
Media stream
Audio and video, secured with an established group encryption method. This layer carries ciphertext only, which is why it only moves to you in the on-premise model.
Separation
Connection data, credentials and accounts are stored separately. Depending on the operating model, on shared, dedicated or your own infrastructure.
For a technical review we provide your IT department with the architecture overview, the methods used and the data centre details. Ask for them before you decide.
Clarifications
So there are no misunderstandings.
Three points an auditor will ask about anyway. We would rather say them up front.
Whose certification is meant
The data centres we operate in are certified to recognised standards. Where we refer to that, we name whose certification is meant and do not present it as our own.
Availability is agreed
We operate the platform carefully. A contractually guaranteed availability is agreed individually, matched to your operating model. Talk to us about it before you go to tender.
This page is our own account
What is written here is our own account and does not replace a review. We provide the documents for one: architecture overview, methods used and data centre details.
Ask us for the documents before you decide.
Architecture overview, methods used, data centre details and the draft data processing agreement. A demo does not replace a review, and we do not pretend otherwise.
Next step
Letyour IT department take a look.
Documents up front, questions answered directly, with no sales detour.
- Operated in Germany
- On-premise on request
- Documents before you decide