Enterprise Security

Security & Data Protection

Robust safeguards protecting your media assets, transcripts, and credentials.

1. End-to-End Encryption

In Transit (TLS 1.3)

All web traffic, video upload streams, and API communications are encrypted using modern Transport Layer Security (TLS 1.3) with perfect forward secrecy.

At Rest (AES-256)

All raw source videos, extracted audio files, rendered vertical clips, and database records are encrypted at rest using industry-standard AES-256 encryption.

2. Multi-Tenant Asset Isolation

AutoClipp is built with strict multi-tenant authorization barriers:

Strict Authorization Guards: Every database query and API endpoint executes backend ownership verification (requireProjectAccess, requireVideoAccess). Users can never access or inspect another creator's media.
Presigned Expiring Media URLs: Video downloads and streaming links are signed with time-limited cryptographic tokens that expire automatically.
Role-Based Access Control (RBAC): Administrative routes are isolated behind strict role verification checks.

3. AI Processing Privacy

No AI Model Training on User Videos

We contractually ensure that all speech-to-text transcription models and LLM moment detectors execute in zero-retention inference mode. Your speech, face, transcripts, and proprietary clips are never used to train or refine public artificial intelligence models.

4. Worker Queue Sandboxing

Video processing and FFmpeg encoding pipelines run inside isolated background worker instances. Temporary files created during audio extraction or reframing are automatically wiped from ephemeral disks immediately after storage upload completion.

5. Vulnerability Reporting

We welcome reports from independent security researchers. If you discover a security vulnerability in our platform, please contact us immediately at security@autoclipp.com.