Trust & Infrastructure

    You're putting your business's content on our platform. Here is exactly where it lives, how it's protected, and the promises we hold ourselves to.

    Where your content lives

    Source files and streaming copies are stored on US/EU infrastructure with server-side encryption at rest. Playback is delivered over TLS from a global edge network with 300+ locations, so viewers stream from a cache near them — and launch-day spikes hit the edge, not a single origin.

    How it's protected

    Signed, expiring playback URLs; per-project domain whitelists; country and IP rules; password protection; and viewer-identifying watermarks with a PrintScreen blackout. Access to your account is protected by row-level security on every table, and the public API is rate-limited per key.

    Reliability

    New videos have their manifests and opening segments pre-warmed into the edge cache at encode time, so first plays start fast. Encoding capacity scales automatically with your upload volume. We monitor the pipeline end-to-end, from upload to first frame.

    No forced upgrades. No billing ambushes.

    Your plan is your plan: we will never force you onto a higher tier mid-cycle or surprise you with a retroactive bill. If a payment fails, we retry smartly, email you, and hold your content through a grace period. Your library is never deleted over a card error.

    Your content is always yours

    Original files and collected viewer emails are exportable at any time, from the dashboard or the API. If you ever leave, you take everything with you — no export fees, no lock-in.

    Security, specifically

    Storage is server-side encrypted at rest and every playback and API request travels over TLS. DRM licensing (Widevine, PlayReady, FairPlay) is issued through a licensed multi-DRM provider; content keys never sit in the player or in your browser. Playback tokens are signed and short-lived. Every database table is guarded by row-level security so one tenant can never read another's rows, and each API key is rate-limited independently. Report a vulnerability to video@streamvault.one and we respond within one business day.

    Payments and the legal entity

    Payments are processed by Stripe; your card details are entered on Stripe's forms and never touch our servers. StreamVault is operated by Queens Research L.L.C., a United States company, and streamvault.one is its only website. A data processing agreement (DPA) and completed security questionnaires are available on request for procurement.

    Data handling

    We collect what's needed to run the service and nothing more — see the Privacy Policy for specifics. We don't sell personal data, we don't run ads, and viewer emails captured through your gates belong to you.

    Questions from your security or procurement team? video@streamvault.one — we answer diligence questionnaires.