Security

Encryption in transit and at rest

All data sent to and from Reelgenics is encrypted using TLS 1.2 or higher. Uploaded videos, generated clips, and account data are encrypted at rest with AES-256, including database backups.

Access controls

Access to customer data is restricted by role, so team members can only see what their job requires. Access to production systems by our own engineers is logged and reviewed, and every privileged action is auditable.

Secure infrastructure

Reelgenics runs on established cloud infrastructure providers that maintain physical security, network segmentation, and redundancy for the hardware underneath our service, so we can focus our own security work on the application layer.

Monitoring and logging

We continuously monitor production systems for unusual activity and keep audit logs of authentication events, billing changes, and administrative actions, so we can detect and respond to potential incidents quickly.

Vendor due diligence

Payments are processed by Stripe, a PCI DSS Level 1 certified provider. Reelgenics never stores your full card number on our servers. We review the security posture of any third-party service before it's allowed to touch customer data.

Regular reviews

We run automated dependency and vulnerability scanning on every release, perform periodic reviews of our own security controls, and patch critical issues as soon as they're identified.

Reporting a vulnerability

If you believe you've found a security issue in Reelgenics, please report it responsibly rather than disclosing it publicly.

• Email security@reelgenics.com with a clear description, steps to reproduce, and any proof-of-concept.
• Give us a reasonable amount of time to investigate and remediate before any public disclosure.
• We aim to acknowledge reports within two business days and will keep you updated on our progress.

Your responsibilities

Security is a shared responsibility. Help keep your account and content safe by:

• Using a strong, unique password and enabling any available account protections.
• Limiting team member access to only what each person needs.
• Reviewing connected apps and active sessions periodically from account settings.
• Reporting anything suspicious to security@reelgenics.com right away.