Trust and security

Screen recordings are among the most sensitive things a team produces — they show real systems, and often real data. This page describes how Decodx handles them.

Data handling

Your sources and rendered artifacts belong to your workspace and are isolated from other tenants. Shares are the only mechanism that makes anything reachable outside it, and every share carries explicit permissions.

Blur is your tool, not ours. Decodx does not automatically detect and redact sensitive information. If a recording shows customer data, blur it deliberately, scene by scene, before publishing — see Compose and edit.

Sub-processors

Decodx orchestrates external providers for the expensive parts of a render — speech synthesis, avatar generation, and language models used for drafting scripts and documents. Material you render passes through them.

The current sub-processor list is available on request from support@decodx.ai.

Access control

Roles, groups and workspace boundaries control who can see and do what — see People and permissions. Two-factor authentication is available on accounts, and active sessions can be reviewed and revoked.

Domain verification and policy

Organisations can verify their email domains and set organisation-level policy governing what members may do.

Audit log

Administrators can review an audit log of actions taken in the organisation.

Compliance

For current compliance status and security questionnaires, contact support@decodx.ai.