Security that earns your trust

Resilient infrastructure

Hosted on Cloudflare edge with managed Postgres, automated backups, multi-region failover and continuous monitoring.

Workspace isolation

Every table enforces Row-Level Security. One workspace cannot read another's prompts, videos, credits or settings — guaranteed at the database layer.

Encryption in transit & at rest

TLS 1.2+ for every connection and AES-256 for data at rest. Secrets and provider keys are stored encrypted.

Server-side-only provider keys

Generation credentials never reach the browser. Every privileged call — submission, status check, cancellation — runs on our server.

Granular access controls

Per-workspace owner and member roles, stored separately from profiles and verified server-side. Super-admin actions are audit-tracked.

Continuous monitoring

Real-time error capture, generation lifecycle tracking with automatic credit refunds, plus security scans on every deployment.