Your data, protected
Security is built into every layer of VidReframer. Here is how we keep your videos and account safe.
Encryption in transit
All data transmitted between your browser and our servers is encrypted using TLS 1.3. We enforce HTTPS across all endpoints and reject insecure connections.
Encryption at rest
Videos, account data, and backups are encrypted at rest using AES-256 on SOC 2-compliant cloud infrastructure. Encryption keys are managed with strict access controls.
Access controls
Internal access to production systems is restricted to authorized personnel only, logged in full, and reviewed regularly. Customer data is accessed only when necessary to resolve support issues.
Secure infrastructure
VidReframer runs on cloud providers that maintain industry-standard physical and network security controls, including redundant data centers and DDoS mitigation.
Monitoring and logging
We monitor our systems 24/7 for anomalous activity and maintain detailed audit logs to detect and respond to potential security incidents rapidly.
Regular security reviews
We conduct periodic security assessments and dependency audits. Critical patches are deployed within 24 hours of disclosure. Dependencies are reviewed and updated on a regular cadence.
Vendor due diligence
Payment processing is handled by Stripe, which is PCI DSS Level 1 certified — the highest level of certification available. We do not store full card numbers on our servers.
Data isolation
Each user account's data is logically isolated. Video files and project data cannot be accessed by other users. Access permissions are enforced at every layer of the stack.
Your responsibilities
Security is a shared responsibility. To keep your account secure, we recommend:
- → Use a strong, unique password for your VidReframer account.
- → Enable two-factor authentication when available.
- → Do not share your account credentials with others.
- → Log out of shared or public devices after use.
- → Contact us immediately if you notice any suspicious activity on your account.
Responsible disclosure
If you discover a security vulnerability in VidReframer, please report it to us before making it public. We review all reports and respond within 72 hours. We are committed to working with security researchers to understand and resolve valid reports quickly.
When reporting, please include: a description of the vulnerability, steps to reproduce it, and the potential impact. We ask that you do not access, modify, or delete data that is not yours, and that you avoid disrupting production systems during your research.
security@vidreframer.com