The security boundary of shared footage
From detection to delivery, destructive redaction, space isolation and auditable sharing are the defaults, reducing personal-information risk in shared footage.
Your first sign-in includes a one-time 10-minute allowance (valid 30 days)
Secure behavior at every stage
Destructive redaction
Coverage is burned directly into the output, with no toggleable mask layer or original-region recovery payload.
Space-level ownership checks
Every read and write of uploads, jobs, results, shares and audits is checked against the personal workspace, and cross-space access is treated as not found.
Login credential security
Browser sessions use HttpOnly cookies with no reusable API key.
Write origin validation
Session-authenticated writes validate the request origin and reject requests that fail the check before any resource changes.
Auditable with time-limited retention
Share access and processing events keep a minimal audit record, purged on schedule.
Active deletion and cleanup
When an account closes or a workspace expires, media and identity are purged per policy; cleanup failures raise alerts.
Honest about capability limits
Destructive redaction reduces the exposure of personal identifiers, but it cannot prevent screen recording or external capture of a delivered copy, nor prove the identity of the actual viewer.
Watermarks mark the outbound target to deter redistribution and contain no dynamic verification code or anti-counterfeit hash.
We do not display real customers or data on the public site; public statements of product capability reflect implemented behavior.
Share footage the compliant way
Create a personal workspace and go through a redaction and controlled share.