Signed playback

Every protected link carries a short-lived HMAC-SHA256 token that names one video, one verified domain and an expiry. Our CDN is designed to check the token and the domain on every request.

Domain lock

We match the domain exactly, so a copied link is not served on another site.

Uploads

Your browser uploads straight to storage with a pre-signed upload link. Uploads only.

Delivery

We use our own domain and our CDN. We do not serve playback from a public storage URL, and we do not use a pre-signed playback URL. The token is not part of the cache key.

Transport

We use HTTPS/TLS.

Accounts

We use API keys, verified domains, and access control for our internal admin pages.

Content checks

Human review by our team. We do not use an automatic content check today.

No guarantee

No system is completely secure. This page describes our measures; it is not a guarantee.

What we do not do

We do not use DRM. A signed link stops a copied link and hotlinking. It does not stop a determined viewer from recording the screen. We do not claim otherwise.

Data breaches

See the breach notice in our Privacy Policy.

Report a security problem

Write to security@segmnt.cloud. We welcome good-faith security research and will not take legal action against good-faith reports.