Content security is critical, and we do all we can to ensure that your data is only accessible by the people you choose.

What certification does CaptionHub carry?

CaptionHub is FACT certified. FACT are ISO27001 approved auditors.

What other security features does CaptionHub offer?

  • All traffic to and from the browser is encrypted via https

  • By default, a new user for CaptionHub has no access – permission needs to be manually given for each and every project

  • An audit trail for logged in users

  • Expiring URLs

  • Watermarked media (for Enterprise customers)


Is my data encrypted?

Yes. All data is encrypted every time it’s written, using 256-bit encryption via Amazon’s SSE-S3. There’s more information here.


Can I install my own instance of CaptionHub behind my firewall?

Yes. For our Enterprise customers, CaptionHub can be deployed in a variety of ways. Please see Infrastructure, below.


Is your data center SAS70 Type-II or SSAE 16 Type II certified?

Yes. AWS is SAS70 Type-II certified.


Who can see my information?

Access to data is limited to CaptionHub account administrators and developers. From time to time, CaptionHub also employs third party developers, who are strictly contractually bound regarding any confidential information.


What steps do you take to prevent the loss of my data?  What happens in the event of data corruption?

We take daily backups of our database to Amazon S3. We don’t back up video data, but we do back up caption data/work so that it can be restored in due course. Incidentally, S3 redundantly stores data across multiple devices and facilities. Video data is also stored on S3, which has a durability rating of 99.999999999%.


What type of security and monitoring practices are in place at the data center?

AWS’s security policies are well documented here: Their compliance certifications are listed here:


Can you produce an audit trail which logs who has accessed what?

By default a user can’t see anything in CaptionHub, they have to be manually given access to a project before they can view it. We track user login times and IP address, and we log various forms of activity: handover, download, assignment, etc.

Was this article helpful?
0 out of 0 found this helpful
Have more questions? Submit a request


Please sign in to leave a comment.
Powered by Zendesk