Owner-scoped workspaces
Workspaces are tied to their owner, with collections, videos, assets, and tags kept inside that ownership boundary.
Security / SuperDuper Videos
Clear boundaries for sources, publishing, and ownership.
SuperDuper Videos is designed so private source material, public playback, account ownership, and website publication each have an explicit job and boundary.
Ready to play
Private originals
Custom-upload source originals are retained in private object storage, separate from public derivatives.
Approved origins
Publication settings define where an embedded player is permitted to run.
The useful details
Big idea. Practical workflow.
Data boundaries
Private inputs and public outputs are not the same thing.
Source originals remain private. Public playback and derivative assets are exposed through purpose-built delivery paths only when the video workflow calls for them.
- Private source object storage
- Public derivatives separated by purpose
- Application servers do not proxy media bytes
Authorization
Every customer-owned read and mutation is scoped through ownership.
The product hierarchy starts with an owner-scoped workspace. Collections, videos, assets, and tags stay inside that workspace boundary.
- Authenticated private routes
- Owner-scoped resource access
- Cross-workspace relationships rejected
Publication
Going live is an explicit operation.
Hosted video is not treated as publicly embedded merely because processing completed. Publication and allowed origins are managed as their own operational choices.
- Explicit publication lifecycle
- Origin allowlists
- Versioned public embed snapshots
Responsible reporting
Found something that needs attention? Tell us directly.
Please avoid placing sensitive evidence in a public channel. Contact us with a concise description and a safe way to reproduce the issue.
- Use the contact page for initial coordination
- Do not include credentials or private customer data
- Allow time for validation before public disclosure