Your footage, on your terms.
We're honest about what we do and don't do. No certification badges we haven't actually earned.
What's true today
- Projects are private by default — only you and people you explicitly invite can see them.
- You can delete individual projects or your entire account at any time.
- Your uploads are not used to train shared models by default.
- Media access uses expiring, signed URLs — we don't ship permanent public links.
- You can download a copy of your personal data.
- AI provider keys you add are encrypted before storage, bound to your account, never sent back to your browser, and can be revoked (erased) at any time. They are not written to logs or analytics.
- Consent for analytics and marketing is separate, revocable, and off by default for anything non-essential.
Motion code isolation
Generated HTML is untrusted. The Motion Studio preview uses an opaque sandboxed iframe with same-origin access denied and a restrictive Content Security Policy. Production exports require a separate disposable browser container without service or provider credentials, with outbound networking disabled, a read-only root and bounded CPU, memory, process, frame and time limits. Rendering stays disabled when that isolation is unavailable. Lint and media verification support these controls; they do not replace human review.
What we don't claim (yet)
- No SOC 2, ISO 27001 or HIPAA badge — we're not certified, so we don't display those logos.
- No "enterprise-grade security" boilerplate. When we're ready to say something specific, we will.
Reporting a vulnerability
Please email security@vidrial.app. Include reproduction steps and, if you can, a proof of concept. We aim to acknowledge within two business days.