AUTOM8LABS | Transl8 - Security Data Sheet

What it does

A Revit add-in that translates the text held in a model, such as room names, sheet titles, text notes, parameter values and keynotes, between 34 languages. Translation is performed by an AI service that AUTOM8LABS operates. Supported on Revit 2022 to 2027.

Without a licence the add-in can scan a model and preview the text it would translate. It makes no translation request until a licence is active.

How edits are controlled

Nothing in the model changes until the user reviews the translations and presses Apply. Scanning and translating are read-only steps.

Apply writes the translations inside a standard Revit transaction, so the change appears in the Revit undo history and can be reversed with Undo. A Revert function restores the original text from the translation memory at any later point.

Worksharing permissions apply exactly as they do to manual edits. An element owned by another user is skipped and reported, never taken over.

Keynote files are never modified. Transl8 writes a translated copy alongside the original and points the model at the copy. Revert points the model back at the original.

The add-in never saves, synchronises or relinquishes on its own.

Where model data goes

Only the text strings selected for translation leave the workstation. The model file, its file name and path, and all other model content stay on your machine.

Translation requests go over HTTPS to the AUTOM8LABS gateway hosted in Frankfurt, Germany, which forwards the text to Anthropic for processing in the United States and returns the result. The add-in holds no AI provider credential. AUTOM8LABS does not store the text at any point. Anthropic deletes it within 30 days and does not use it to train models, under Anthropic's commercial terms.

Each translation request contains	The text strings to translate, each with the numeric element identifier and the name of the property it came from; the source and target language; any glossary terms the user has defined; the licence key, a hashed machine identifier and the product code.
Never sent	The model file, file names and paths, geometry, project information, user names, and any text the user did not include in the scan.

What AUTOM8LABS receives

Translation requests	Described above. The gateway records token counts, response time and status for each request, against the licence key, so that usage can be metered. It does not record the content of the request or the response.
Licence activation and validation	Licence key, a hashed machine identifier, the Windows machine name, and the add-in version. Floating licences also send a periodic seat heartbeat carrying the same identifiers.
Update check	Product code and version number, each time the Transl8 dialog is opened. The result decides whether the build is still supported and whether to mention an available update. Updates are never installed automatically.

The machine identifier is a SHA-256 hash of hardware values. The underlying hardware identifiers never leave the machine.

What is stored

Translation text, AUTOM8LABS	Not stored. Processed in transit only
Translation text, Anthropic	Deleted within 30 days. Not used for model training
Usage metadata	Token counts, response time and status per request. No content. Held for up to 24 months for billing and abuse prevention
Model content, file names and paths	Never received or stored
Licence records	Licence key, hashed machine identifier, machine name and add-in version. Held for the duration of the licence and deleted on request
Payment records	Stripe for website purchases, Autodesk for store purchases. AUTOM8LABS does not store card data. Invoice customers pay by bank transfer and no card data is involved

On the workstation

Translation memory travels with the model. Applied translations are kept in a JSON file in a Transl8 folder beside the model, so the team shares one memory and Revert always works. For a workshared model that folder sits beside the central file. For a cloud model, or an unsaved one, the file is kept under the user's local application data instead. The file holds element identifiers, property names, categories, source text, translated text, target language and a timestamp.
Translation state is written into the model. Each translated element carries a small Extensible Storage record with its translation state, a timestamp and a hash of the source text. This stays with the model like any other element data and is what lets Transl8 tell translated text from edited text on a later scan.
A diagnostic log is always written to the user's local application data, one file per day. It records what was scanned, translated and applied, including source and translated text, element identifiers and, where a keynote file cannot be found, its path. It never leaves the machine and is not collected by AUTOM8LABS.
Glossaries and settings are plain files under the user's local application data. Glossary terms are included in translation requests by design.
Excel export and import write and read a spreadsheet at a location the user chooses. After an export Transl8 opens the file in Excel.
Stored credentials are encrypted. The licence cache is protected with Windows DPAPI. The add-in holds no AI provider key.
Outbound HTTPS only. The add-in opens no listening port and talks to a single AUTOM8LABS host.
Installation is per machine and needs administrator rights once. No elevated privileges are required at runtime.

Supply chain

Thirteen third-party components, all widely used libraries from the official NuGet ecosystem. Every component declares a licence. All are MIT except one, which is Apache-2.0. There are no copyleft licences in the shipped product.

A CycloneDX Software Bill of Materials is produced for each release. At add-in version 2.1.0 no shipped component carries a known vulnerability.

SBOMs and installer hashes are available on request from security@autom8labs.io.

Sub-processors specific to this product

Anthropic PBC	AI translation. Text strings submitted for translation. United States. Anthropic Data Processing Addendum with the EU Standard Contractual Clauses and the UK Addendum
Render Services, Inc.	Hosting of the AUTOM8LABS gateway and licence server. Licence records and usage metadata. Frankfurt, Germany (EEA)

The general sub-processor list is on the Trust Center.

Assurance

Every binary and installer is code-signed as AUTOM8LABS LTD through Azure Trusted Signing.

See the Trust Center for the full assurance position, the sub-processor list and the incident notification process.