Security

Encryption in transit and at rest

All traffic to and from Clipcaptor is encrypted using TLS 1.2+. Uploaded footage, generated clips, and account data stored in our databases and backups are encrypted at rest with AES-256.

Access controls

Role-based permissions in Team Workspace ensure teammates only see the projects and settings relevant to their role. Internal access to customer data is role-scoped, logged, and limited to what's needed to operate and support the product.

Secure infrastructure

Clipcaptor runs on reputable cloud infrastructure providers, with isolated environments for production, staging, and development, and industry-standard physical and network security controls at the data center level.

Monitoring and logging

We monitor our systems for suspicious activity and maintain audit logs to help detect and respond to potential incidents quickly, including anomalous access patterns and failed authentication attempts.

Vendor due diligence

Payments are handled by Stripe, a PCI DSS Level 1 certified payment processor; we don't store full card numbers on our servers. AI processing and hosting sub-processors are reviewed for their own security and data-handling practices before we rely on them.

Regular reviews

We periodically review our security practices, dependencies, and third-party libraries, and apply patches and updates in a timely manner. Business plans include additional review artifacts such as security questionnaires on request.

Reporting a vulnerability

If you believe you've found a security vulnerability in Clipcaptor, please report it to us responsibly at security@clipcaptor.com with enough detail for us to reproduce it. We ask that you not publicly disclose the issue until we've had a reasonable opportunity to investigate and address it, and we'll respond as quickly as we can.

Your responsibilities

Security is a shared responsibility. We recommend using a strong, unique password for your Clipcaptor account, limiting workspace access to only what each teammate needs, and removing access promptly when someone leaves your team.

For details on how we collect, use, and protect personal information, see our Privacy Policy.