The short answer

What should I ask before uploading identity, financial or medical documents to a translation provider?

Ask how files are transferred, who can access them, whether subcontractors are involved and how retention works. A secure-looking upload page or confidentiality slogan is not enough to establish a provider’s actual data practices.

Sources: Protecting personal information: a guide for business · Checked October 25, 2026

What this guide covers

  • Map the information before transfer
  • Ask beyond the upload screen
  • Plan the end of the project
  • Make the receiving instruction part of the file
  • A practical review for this handoff
  • Keep an auditable handoff for secure file sharing questions for a translation order

At a glance

  • Ask how files are transferred, who can access them, whether subcontractors are involved and how retention works.
  • Identify sensitive data before upload.
  • Use the free checklist to organize the handoff before ordering a paid service.

Map the information before transfer

Identify the sensitive material and ask whether a reduced quote sample is sufficient before production. Use the provider’s documented upload channel rather than sending records to an unverified contact. Confirm the company and intended recipient of the files.

Ask beyond the upload screen

Transfer protection is only one stage. Ask about translator access, subcontractors, storage location, account permissions and incident contacts. The FTC’s business guidance describes general data-security principles; it does not certify individual translation companies or prove that a particular system is secure.

Plan the end of the project

Find out whether source images, working files, certificates and backups have different retention periods. Ask how a deletion request is handled and what must be retained for legal or business reasons. Keep your own final records before asking for deletion.

A practical review for this handoff

Before opening an upload link received by email, navigate to the provider’s known official site and confirm the project channel. An existing brand name in a message does not establish who controls the destination. Avoid public sharing links for identity records, and review whether an earlier shared link remains accessible after the project ends.

Choose a channel before sharing sensitive records

A translation project may expose identity numbers, financial transactions, health information and relatives' details. Ask which upload channel the provider designates, who can access the files and how subcontractors receive them. A publicly shareable drive link may be convenient but can expose the source beyond the intended reviewer. Restrict recipients and avoid putting sensitive information in the file name or message subject when it is unnecessary.

The FTC's information-protection guidance emphasizes understanding information flows and limiting access. Apply that as a practical question about this project rather than assuming that a lock icon answers every privacy issue. HTTPS protects a connection but does not itself explain how a provider stores files, grants staff access or responds to an accidental disclosure. Look for the provider's actual policy and designated support route.

Separate access for pricing, translation and delivery

A preliminary quote may need only a representative layout or page count, whereas the translator may later need the complete source. Share only what is useful at each stage while keeping clear which copy is the final translation source. If a redacted quote sample becomes the working file accidentally, the finished certificate may cover an incomplete document. Confirm the accepted source version before work begins.

For a concrete handoff, upload the agreed records through the designated portal, verify that every page arrived and then remove any temporary broad-access link you created. Ask whether delivery uses an authenticated account or an email attachment and how a recipient can obtain the file without exposing it publicly. Store credentials outside the document itself. If a file went to the wrong recipient, report the incident through the provider's stated channel promptly; deleting your own local copy does not retract a message or remove another person's downloaded file.

Secure file sharing questions for a translation order: review points
Item to inspectQuestion to resolve
TransferWhich documented channel receives the files?
AccessWho can view or process them?
RetentionWhat remains after completion or deletion?

Prepare your next questions

Your working checklist

0 of 4 complete

Download the designed PDF checklist to mark on screen or print. Your selections on this page stay here.

Download PDF checklist

Version: October 25, 2026.

Go to the source

Sources & verification

Follow the institution that owns the requirement and check its current instructions.

Official source · Federal Trade CommissionProtecting personal information: a guide for businesswww.ftc.gov · Checked October 25, 2026

Common questions

Does HTTPS prove the whole service is secure?

It addresses the connection, not every aspect of access, storage, sharing or retention.

Sources: Protecting personal information: a guide for business

Can I use a redacted file for a quote?

Ask the provider what it needs and distinguish that sample from the final production source.

Sources: Protecting personal information: a guide for business

Should subcontractor access be disclosed?

Ask directly and read the privacy and service terms for sharing practices.

Sources: Protecting personal information: a guide for business

Does deletion always remove every backup immediately?

Do not assume so. Ask about scope, timing, exceptions and backup handling.

Sources: Protecting personal information: a guide for business

About this guide

By Immigrant Insider editorial desk. Updated .

Report outdated information