# DeepL privacy rating

Machine translation service from DeepL SE in Cologne, with a free web translator, paid DeepL Pro plans, an API, and desktop and mobile apps.

## Summary

DeepL scores 31 out of 100 (grade F) on the translation criteria. It meets 2 of 10 criteria: no ads or data sales and TLS configuration. It partly meets independent audit, security headers and text not kept. It does not meet open source, no trackers or telemetry, transparency report, tells users about requests and works offline. It is based in Germany: Fourteen Eyes member; EU member (GDPR). Automated tests: SSL Labs grade A+ and Mozilla HTTP Observatory grade B+.

- Website: https://www.deepl.com
- Jurisdiction: Germany. Fourteen Eyes member. EU member (GDPR).
- Platforms: Web, Windows, macOS, Android, iOS
- Home page trackers: none found
- Category: [Translation](https://privacyratings.com/translation/)
- Grade: F (31/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Open source | No | Closed source. |  |
| No trackers or telemetry | No | With consent, marketing cookies and conversion pixels from LinkedIn, Google, Microsoft, Meta, Reddit and others are loaded on the website. | https://www.deepl.com/en/privacy |
| No ads or data sales | Yes | Funded by DeepL Pro and API subscriptions. The translator shows no ads. | https://www.deepl.com/en/pro |
| Independent audit | Partial | Only the auditor's opinion from a SOC 2 Type 2 audit is public, not the full report. | https://assets.ctfassets.net/pplyeawnfzc7/6ME8nhfxNMIx54UhI88rNg/aa65dbf11f0a6979750babccb8f2336d/Audit_Verdict_DeepL_SOC_2_Type_2.pdf |
| Transparency report | No | No transparency report or government request policy is published. |  |
| Tells users about requests | No | No published policy on notifying users about data requests. |  |
| TLS configuration | Yes | Grade A+ | https://www.ssllabs.com/ssltest/analyze.html?d=www.deepl.com&hideResults=on |
| Security headers | Partial | Grade B+ (80/100+) | https://developer.mozilla.org/en-US/observatory/analyze?host=www.deepl.com |
| Modern web standards | Not tested yet | Not tested yet. |  |
| Works offline | No | Online only. Translation runs on DeepL's servers. |  |
| Text not kept | Partial | Texts sent to the free translator are kept for a limited time and used to train DeepL's models. With DeepL Pro, texts are deleted after translation and not used for training. | https://www.deepl.com/en/privacy |

Source: https://privacyratings.com/translation/deepl/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/translation/deepl.md