Security

Data residency

Storage and processing run in EU regions. Raw footage does not leave that boundary in the normal course of processing, and the regions in use are named in the data processing agreement.

Encryption and access

• Uploads and downloads run over TLS; stored objects are encrypted at rest.
• Access to raw material is granted per project, limited to processing and review roles, and revoked at project close.
• Download URLs are signed and short-lived; they are not shareable credentials.
• API keys are scoped to datasets, versions and licence tier, and can be rotated without a new agreement.

Privacy processing

Automated detection removes faces, bystanders, screens, documents, licence plates, badges and identifiable signage, and a reviewer checks every clip afterwards. Clips that cannot be cleared are removed rather than shipped with a caveat.

This describes a designed process, not a certification, and no dataset is presented as fully anonymous.

Retention and withdrawal

Raw material carries a defined retention period per project. A contributor or site owner can withdraw: affected episodes are excluded from future versions, and access to affected files in existing versions is revoked and logged.

Disclosure logging

Every delivery is logged with recipient, scope, dataset version and time. That log is what makes a later rights or governance review answerable with evidence rather than recollection.