Security and Footage

Self-serve aiScreeningRoom is the indie path. There is no test audience. Testers never see the film, so they cannot leak it. Processing still uses private cloud storage and paid AI APIs. For major-studio security requirements, ask about the private-tenancy path rather than assuming self-serve meets that bar. aiScreeningRoom is not currently TPN assessed. We have not published a SOC 2 report.

• Source upload. Private cloud storage. Deleted after a successful analysis. If that first delete fails, we retry in the same run, then about once an hour until the object is gone. Seven days after upload is the outer limit. A failed analysis keeps the upload so you can retry. The report shows the removal date once storage confirms the delete.
• Downscaled copy for viewing. Sent to Google's paid Gemini API so the model can watch the footage. We delete that API copy when processing finishes. Google's paid terms state that those submissions are not used to train Google's general models.
• Report text. OpenAI writes the narrative report from the evaluation. It receives analysis outputs, not the full-resolution master file.
• Comparable titles. OMDb and TMDB supply public scores and grosses. They receive title metadata, not the film file.
• Timeline stills. Frames cited in the report stay with the report in private storage. They are not a downloadable film file.
• Reports and chat transcripts. Stored so you can return to your results. They do not include a downloadable video file. Optional voice audio is processed by OpenAI and is not stored.

Uploads are stored in private Google Cloud Storage buckets, not public buckets. Browser uploads use signed URLs with restricted origins. The Site and the application are served over HTTPS.

Customer film files are not viewed in the ordinary course. During private beta, authorized admins may read reports and chat transcripts to diagnose support issues. That access is read-only.

You can create a read-only link to a completed report and send it to people you choose. Anyone with the link can open it. The link does not expire. Felix chat is not on the shared page.

If we become aware of confirmed unauthorized access to your film or any derivative of it, we will notify you without undue delay, and within any shorter period required by your agreement with us.

To report a vulnerability or a suspected incident, use the Contact page with topic Security, or email ccw+332@email.cinemacloud.works. CinemaCloudWorks, Inc. operates that mail domain.