When you upload a visa document, contract, medical record or court translation to an AI tool, where does it actually go? For most generic AI translators the honest answer is: offshore servers, indefinite retention, and ingestion into future model training. For Australian visa applicants, migration agents, law firms, healthcare providers and government departments, that is a privacy and compliance problem you cannot fix after the fact.

This page explains, plainly, how Immi Translating Service handles your data, why our stack is different from generic AI translators, and what “Australian onshore processing” actually means when it counts.

The risk most people don’t see

Free and consumer-grade AI translation tools typically:

For a holiday menu translation, that may be acceptable. For a Form 80, a statutory declaration, a medical report supporting a Subclass 602, or a sealed court order, it is not.

What “Australian onshore processing” actually means

Onshore processing is more than a marketing phrase. It has three concrete components:

  1. Geographic location of compute. Your document is processed on servers physically located in Australia, in our case the AWS Asia Pacific (Sydney) region.
  2. Jurisdictional reach. The data and the entity processing it sit under Australian law. That means the Privacy Act 1988, the APPs, and Australian courts, not foreign subpoenas under the US CLOUD Act or equivalent.
  3. Defined retention and deletion. Documents are kept only as long as needed to deliver and quality-assure the translation, then deleted on a documented schedule.

If a provider cannot tick all three, “onshore” is a label, not a guarantee.

The Immi Translating Service security stack

Our self-service AI-assisted translation runs on AcudocX, the same platform used by The Australian Computer Society for its translation infrastructure. The stack is built around four commitments:

1. Claude Sonnet 4.6 on AWS Bedrock, Sydney region

The large language model behind our AI-assisted translation is Anthropic’s Claude Sonnet 4.6, accessed through Amazon Bedrock in the AWS Asia Pacific (Sydney) region. AWS Bedrock has a contractual guarantee that your prompts and completions are not used to train Anthropic’s models, not used to train Amazon’s models, and not shared with Anthropic or any third party. The data stays inside the AWS account boundary, in Sydney, under Australian jurisdiction.

2. HIPAA compliance

The AcudocX platform is HIPAA compliant, which matters whenever a translation involves protected health information — medical reports for Subclass 602 visas, mental-health assessments for protection claims, or specialist letters supporting a partner visa. HIPAA is a US framework, but its controls (encryption at rest and in transit, access logging, breach notification, role-based access) are the de facto global benchmark for handling sensitive personal data, and we hold ourselves to it.

3. ISO certification — on track

AcudocX is on track for ISO certification covering information security management. ISO 27001 is the international standard for how an organisation runs its security program: risk assessments, documented controls, audit trails, supplier management, and continuous improvement. Being on the certification path means these controls are already in place and being independently assessed.

4. NAATI endorsement — soon

Hundreds of NAATI-certified translators use the AcudocX platform, and AcudocX is on a path to formal NAATI endorsement. That is the strongest possible signal that the workflow, the audit trail, and the certification process meet the standard expected by the Australian regulator for translation in immigration, legal and government contexts.

What this means for each type of client

Migration applicants

Your birth certificate, marriage certificate, police check or Form 80 source document is not sitting in a generic AI provider’s training data, and it is not on a server outside Australia. It is processed in Sydney, under Australian law, deleted on schedule, and reviewed by a NAATI-certified translator before it goes back to you.

Migration agents and law firms

You can defend your client-data handling under the Privacy Act and your professional conduct rules. The processing chain is documented, the jurisdiction is Australian, and the audit trail is there if you ever need to demonstrate it. See our Migration Agent Partner Program for partnership pricing and white-label options.

Healthcare providers

HIPAA-aligned controls, encrypted transit and storage, role-based access, and onshore processing make Immi a defensible choice for translating patient records, consent forms and clinical correspondence where consumer AI tools would be a clear breach of duty.

Government and corporate clients

Australian sovereignty over data is increasingly a procurement requirement, not a preference. Our stack is designed to satisfy that requirement out of the box, without you having to negotiate offshore data exemptions or sign US data-processing addenda.

Why “secure AI + human NAATI certification” beats either alone

A pure AI translation, however good, cannot certify a document for the Department of Home Affairs, a court, or a state authority. A pure human translation can, but is slower and more expensive than most applicants need. The combination — AI-assisted draft on a secure Australian stack, then NAATI-certified human review and stamp — is what gives you all three things at once: speed, cost, and legal acceptance.

This is the core of the affordable NAATI translation model: cheapest and fastest, without compromising on where your data lives or who can certify it.

Transparent pricing, no quote required

Because the workflow is standardised and the platform is automated, we do not need to send you a quote and ask you to wait. Pricing is published up front:

You see the price, you upload the document, and the work begins. No quote queue, no urgent loading, no surprises.

Frequently asked questions

Is AI translation secure enough for visa documents?

It depends entirely on the AI stack. A consumer chatbot is not. A purpose-built translation workflow on Claude Sonnet 4.6 via AWS Bedrock in Sydney, with no training on your data, HIPAA-aligned controls, and NAATI-certified human review, is the most secure option currently available in Australia for visa-related documents.

Where is my data processed?

In the AWS Asia Pacific (Sydney) region, on infrastructure operated under Australian law. Your documents do not leave Australian jurisdiction during processing.

Will my document be used to train AI models?

No. Anthropic’s Claude models accessed via AWS Bedrock have a contractual no-training guarantee. Your inputs are not used to improve Anthropic’s models, Amazon’s models, or any third party’s models.

How long do you keep my documents?

Only as long as needed to deliver and quality-assure the translation, then deleted on a documented retention schedule. We do not retain documents indefinitely.

Is this NAATI certified?

Yes. Every translation is reviewed and certified by a NAATI-credentialed translator before delivery. The AI-assisted draft accelerates the work; the NAATI certification is what makes it legally accepted.

Start a secure translation now

Upload your document and begin a secure, NAATI-certified translation on an Australian onshore stack. Transparent per-document or per-page pricing, no quote required, fastest turnaround in the industry.

See our services and pricing

Want to learn more first? Read our guide to NAATI-certified translation or browse the full Immi Guides hub.

Start Your Translation With Immi Today!

Start Your Translation With Immi Today!

Start Your Translation With Immi Today!