Security and trust, stated plainly.

Current engineering posture

The product is designed around authenticated access, organization-scoped authorization, private media storage, controlled media operations, and provider-managed payments. The public page will be expanded only as deployment evidence and ownership are confirmed.

• Organization access is checked before tenant-owned resources are returned or changed.
• Private media is not intended to be exposed as a public asset.
• Payment processing is delegated to the configured provider; the application does not store card numbers or CVV.
• Worker credentials and internal job paths are kept separate from normal customer requests.

What this page does not claim

This page does not claim SOC 2, ISO 27001, HIPAA, PCI certification for the application, or any other certification that has not been verified and approved for publication. Production backup/restore evidence, provider sandbox evidence, and deployment-level review remain release-gate work.

Media and account access

Uploaded videos and derived caption data are project content. Access is expected to remain tied to the authenticated account and organization that owns the project. Exact retention and deletion behavior belongs in the published Privacy Policy once the product policy is finalized.

Report a security concern

A dedicated security contact is not configured yet. Configure a monitored contact before publishing this page as a final security channel.