Security & Compliance — Aeion Cut

Editing studios + agencies handle some of the most sensitive content in their clients' organizations — unreleased films, embargoed campaigns, confidential corporate footage. Aeion Cut ships institutional-grade controls — per-viewer dynamic watermarks on review links, DRM-ready encoding (Widevine/FairPlay/PlayReady), per-project RBAC, audit log on every edit + view, encrypted-at-rest media, AES-256-GCM stream encryption for review portals, IP geofencing options, NDA-enforced reviewer access.

Per-Viewer Watermarking

The single most important defense for pre-release content.

DRM-Ready Encoding

```typescript

Project Access Control

`

Encryption — Layers

`

NDA + Compliance Workflows

```typescript

Compliance Mapping

`

FAQ

Not without re-encoding. Per-frame dynamic watermarks at randomized positions are baked into the video stream. Removal requires re-encoding the entire file, which is typically detected via quality degradation + bitrate anomaly.

Watermark is visible in screen-recordings too. Plus, our license server logs every playback; we can identify which viewer's session was used.

Widevine/FairPlay/PlayReady are industry-grade; cracking is rare + tracked. Major studios accept the residual risk vs no DRM. Tampering signals via license server logs.

Available via a custom enterprise arrangement; air-gapped requires custom engagement. Used by classified projects + pre-release theatrical.

Available via a custom enterprise arrangement. BYOK via AWS KMS, GCP KMS, Azure Key Vault. Revocation = data destruction.

Project owner + designated auditor role. Per-project granularity. Auditor role gets read-only access.

Per-frame watermarks are visible in screen recordings. If a leak surfaces, watermark identifies the original viewer.

Pursuing, available via a custom enterprise arrangement. Most controls in place; formal cert requires annual third-party audit + ongoing reviews.

$10M Cyber + $5M Tech E&O via reputable insurer; COI available on request.

Configurable per-project. Block VPN/Tor by default for sensitive content; allow for trusted reviewers; whitelist specific exit nodes possible.

Annual third-party pentest. Summary available under NDA.

Studio-grade content security.