Beyond compliance.
We aim higher.

Frame.io security extends far beyond encrypting your media. From the creation of our product to the training and vetting of our employees, we constantly strive for best-in-class cloud-based platform security.

Audits and Certifications

Held to the highest of industry standards.

TPN Gold Shield

A global content protection initiative, created by the MPAA and CDSA, TPN provides a set of requirements and best practices to prevent leaks, breaches, and hacks of pre-released content.

SOC 2 Type 2

Performed in accordance with AICPA standards, the SOC 2 Type 2 Audit ensures Frame.io complies with security, availability, and confidentiality principles.

ISO 27001

Frame.io is included in Adobe's ISMS International Organization for Standardization 27001:22 Certification, the gold standard for information security management.

Privacy

Frame.io is self-certified with US–EU Privacy Shield Frameworks. Privacy Shield is an agreement between the EU and US that allows for the transfer of personal data from the EU to the US.

Extended Security for Enterprise

Taken to the next level.

Frame.io Enterprise includes features that guard global corporate IP.

Watermarking

Deter content leaks with Static, Session-based, and Forensic Watermarking. Get real-time watermarks with personal identifying information on each frame.

Digital Rights Management

Server-side encryption ensures your content is only playable by authorized viewers in the Frame.io web, iPhone, or Apple TV app.

Secure login

Single Sign-on (SSO) and Two-factor Authentication (2FA) provide seamless access with added password defense.

A 360º Approach to Security

Your team can feel safe on all sides.

Threats can be creative. So Frame.io takes this into consideration, with measures that protect your team from every angle.

An iron-clad cloud

Secure from the start

Hosted on Amazon Web Services (AWS), Frame.io is built on a rock-solid foundation of security.

Best practices that never sleep

We implement all AWS best practices including MFA, robust password protection, password and access key rotation, and vulnerability patch management.

And so much more

Virtual private cloud, identity and access management, stateful & stateless firewalls, application-level firewalls, and intrusion detection further strengthen the security of Frame.io.

Secure from the start

Hosted on Amazon Web Services (AWS), Frame.io is built on a rock-solid foundation of security.

Best practices that never sleep

We implement all AWS best practices including MFA, robust password protection, password and access key rotation, and vulnerability patch management.

And so much more

Virtual private cloud, identity and access management, stateful & stateless firewalls, application-level firewalls, and intrusion detection further strengthen the security of Frame.io.

Protecting your sensitive media

Custom Watermarking

Prevent leaks of sensitive content with Static, Session-based, or Forensic Watermarking.

Amazon S3 server-side encryption

Your uploaded media is guarded with Amazon S3 server-side AES-256 bit key encryption.

Privacy from the start

Frame.io follows applicable law when it comes to the cross-border transfer of personal data, including relying on adequacy decisions and the Standard Contractual Clauses approved by the European Commission.

Custom Watermarking

Prevent leaks of sensitive content with Static, Session-based, or Forensic Watermarking.

Amazon S3 server-side encryption

Your uploaded media is guarded with Amazon S3 server-side AES-256 bit key encryption.

Privacy from the start

Frame.io follows applicable law when it comes to the cross-border transfer of personal data, including relying on adequacy decisions and the Standard Contractual Clauses approved by the European Commission.

Defending your data

SSL/HTTPS

All interactions with Frame.io use secure sockets and Transport Layer Security.

AES-256 bit key encryption

User data in Frame.io is guarded by one of the strongest block ciphers available — with stored password hashing protection for good measure.

Visibility and accountability

User activities are captured in a detailed audit log via our API, which admins and our customers can view, for greater platform visibility.

SSL/HTTPS

All interactions with Frame.io use secure sockets and Transport Layer Security.

AES-256 bit key encryption

User data in Frame.io is guarded by one of the strongest block ciphers available — with stored password hashing protection for good measure.

Visibility and accountability

User activities are captured in a detailed audit log via our API, which admins and our customers can view, for greater platform visibility.

Secure Inside and Out

Security starts with us.

From design phase reviews for early risk identification, to integrating security tools in development that detect vulnerabilities whenever code is committed, to extensive penetration testing prior to deployment, Frame.io’s security team works relentlessly to ensure a safe, tight platform.

Protocols and devices

Frame.io maintains comprehensive employee device management solutions for all laptops, disks, and devices through firewalls and VPN.

Securing our personnel

All new Frame.io hires are subject to extensive pre-employment background checks for identity, references, and criminal history.

A culture of security

All new Frame.io employees must complete a comprehensive security awareness training, as well as annual training for continued awareness.

Join the 2,985,943 creators who place their trust in Frame.io