# Trust and security > How your recordings are handled, who processes them, and what's auditable. # Trust and security Screen recordings are among the most sensitive things a team produces — they show real systems, and often real data. This page describes how Decodx handles them. ## Data handling Your sources and rendered artifacts belong to your workspace and are isolated from other tenants. Shares are the only mechanism that makes anything reachable outside it, and every share carries explicit permissions. **Blur is your tool, not ours.** Decodx does not automatically detect and redact sensitive information. If a recording shows customer data, blur it deliberately, scene by scene, before publishing — see [Compose and edit](/docs/make-a-video/compose-and-edit). ## Sub-processors Decodx orchestrates external providers for the expensive parts of a render — speech synthesis, avatar generation, and language models used for drafting scripts and documents. Material you render passes through them. The current sub-processor list is available on request from [support@decodx.ai](mailto:support@decodx.ai). ## Access control Roles, groups and workspace boundaries control who can see and do what — see [People and permissions](/docs/account/people-and-permissions). Two-factor authentication is available on accounts, and active sessions can be reviewed and revoked. ## Domain verification and policy Organisations can verify their email domains and set organisation-level policy governing what members may do. ## Audit log Administrators can review an audit log of actions taken in the organisation. ## Compliance For current compliance status and security questionnaires, contact [support@decodx.ai](mailto:support@decodx.ai).