Owner-scoped workspaces
Customer-owned reads and changes are scoped through the workspace owner.
Trust Center / Evidence over badges
Clear boundaries. Honest status. No pretend compliance.
Review how SuperDuper Videos approaches ownership, private source storage, publication controls, security reporting, privacy, and operational transparency.
The operating principle
Private inputs, public outputs, account ownership, and website publication each have a separate boundary. A trust claim belongs here only when the product or policy actually supports it.
Available now
The policies and reporting paths that exist today.
Published
Security
Ownership, private source storage, public delivery boundaries, and responsible reporting.
Open resourcePublished
Privacy
The information handled by the service and the choices available to account holders.
Open resourcePublished
Terms
The current rules and responsibilities governing use of SuperDuper Videos.
Open resourcePublished
Responsible disclosure
Coordinate a security report privately without exposing credentials or customer information.
Open resourceProduct boundaries
How trust shows up in the system.
Private source originals
Custom-upload originals are retained in private object storage, separate from public derivatives.
Explicit publication
Ready playback does not become a public player until publication is intentionally created.
Approved website origins
The public player checks the exact host origin against the publication’s allowed destinations.
Direct media delivery
Public media bytes are delivered from purpose-built media and edge services rather than proxied through the application API.
Permanent deletion
The current product uses hard deletion instead of hidden archive or soft-delete states.
In progress
Reserved for real evidence—not placeholder claims.
Public service status
A live status destination will appear here when it is connected to real monitoring and incident communication.
Subprocessor register
A verified public register is being prepared from the production data-processing inventory.
Accessibility statement
A tested statement will be published after the public and authenticated surfaces complete a documented accessibility review.
Compliance reports
No certification or audit report is currently advertised. Any future report will be listed only after it exists.
Report security concerns privately.
Send a concise description and a safe reproduction path. Do not include credentials or unrelated customer data, and allow time for validation before public disclosure.