Security at Vyds

Your recordings are yours. Here's how we protect them.

How we protect your data

Security is not a feature we bolted on. It is foundational to how Vyds works.

Encryption at rest

All recordings are encrypted at rest using AES-256 in Cloudflare R2. Your data is never stored unencrypted on our servers.

Encryption in transit

Every connection uses TLS 1.3. Uploads, downloads, and API calls are encrypted end-to-end between your device and our infrastructure.

Local-first recording

Recordings are saved to your device before uploading. If the upload fails, you never lose your work. Your file exists locally first, always.

Access controls

Share links with expiry dates. Control who can view recordings. Team admins manage member permissions and can revoke access instantly.

Data retention controls

Set automatic deletion policies for recordings. Export your data at any time. Delete individual recordings or your entire account on demand.

SOC 2 roadmap

We are actively pursuing SOC 2 Type II compliance. Our security practices are designed to meet the Trust Services Criteria from day one.

Infrastructure

Built on trusted, enterprise-grade providers.

Video storage

Cloudflare R2

All recordings are stored in Cloudflare R2 with AES-256 encryption at rest. R2 runs on Cloudflare's global network with built-in redundancy across multiple regions.

Authentication & database

Supabase

User authentication via Google OAuth, session management, and all application data are handled by Supabase with row-level security policies enforced at the database level.

Application hosting

Vercel

The web application runs on Vercel's edge network with automatic DDoS protection, TLS termination, and isolated serverless functions for API endpoints.

Security FAQ

Recordings are stored in Cloudflare R2 with AES-256 encryption at rest. Account data and metadata are stored in Supabase (PostgreSQL) with row-level security. All data is transmitted over TLS 1.3.

Only you and people you explicitly share with. Team admins can see recordings shared to the team library. Vyds staff do not access customer recordings unless required for support and explicitly authorized by you.

Yes. You can delete individual recordings at any time. You can also request full account deletion, which removes all recordings, metadata, and account data within 30 days. Export your data first if needed.

We are on an active SOC 2 Type II roadmap. Our infrastructure and security practices are designed to meet Trust Services Criteria. We use encryption at rest and in transit, enforce access controls, and maintain audit logs.

Record your first video in under 60 seconds

No credit card. No watermarks. No tricks. Just recording.