Always signed in

Video's are only accessible when a user is actually signed in. That's as true for accessing the platfor, embedding or the direct stream of a video. We always check if a user is signed-in and able to watch the video.

Secure communications

All accounts use SSL-encrypted connections by default. You never send or receive sensitive information in plain-text. Additionally, physical and remote security is administered at our offices and datacenter facilities.

Industry Standard Security

We adhere to industry best practices in security, including the following:

  • Sensitive data encryption in the databases
  • Encrypted server communication
  • Tightly firewalled servers
  • Strictly controlled access to servers or customer data

Responsible security disclosure

We have an engaged developer community and we value the role played by third parties in Internet security. Our customers trust us with their data and we take this trust extremely seriously. The following process is in place for any person or organization to report vulnerabilities in our service:

  • Email a complete description of the issue to Include as much detail as possible.

  • Our security team will acknowledge receipt of the email swiftly and start to investigate.

  • Most reports will take less than 48 hours to investigate and to determine the following course of action.

  • We aks to be responsible and retain the private nature of this disclosure until our security team has responded to your submission with a timeline of any mitigation underway.

  • We won't pursue any action against parties who disclose issues through this process.