Viewer-Screen-Landing_2000px.jpg
 

Security

 
 

Moxion has been designed with security at its core.

 

Moxion complies with web broadcast security standards demanded by film companies around the world.

End to End Security: Follow the Data

Moxion has been built from the ground up as an industrial strength, supercharged media hub for the film industry.

TLS Transport Layer Security

Transport Layer Security is a protocol that ensures privacy between communicating applications and their users on the Internet. When a server and client communicate, TLS ensures that no third party may eavesdrop or tamper with any message.

No Account, No Access

Moxion forces all people who wish to view media uploaded to Moxion.io to have a password-protected account. This prevents people from forwarding viewable links to 3rd parties. Only people who have been invited by the project owner can access the footage by logging into their account. All passwords are stored in an encrypted form in the database.

Security Levels

The project owner assigns security levels to all users. The default level is view only. At this level the user can only view the media in their web browser; they cannot upload or download footage without the project owner granting additional permissions.

Everything Tracked and Logged

Once logged in the following user’s actions are logged: media views, uploads, downloads and comments. These provide an audit trail easily searchable by the project owner.

Application Security

  • 256-bit AES TLS encryption
  • Time-based token authentication added to all CDN asset and thumbnail URLs
  • Browser cookies only store the user’s session ID and UI preferences
  • External links to files, projects and presentations use unique, randomly generated URLs
  • All search engine indexing is blocked

Restricted Access

Our servers are with Amazons AWS and are hosted within the US. We also have a code of ethics that ensures that we will never breach customer confidentiality. Each of the servers within the Amazon AWS cloud is architected to be secure and contains a number of capabilities that restrict unauthorised access or usage without sacrificing the flexibility that customers demand.

Application Data Centers

Amazon's AWS world-class, highly secure data centers utilise state-of-the art electronic surveillance and multi-factor access control systems. Data centers are staffed 24×7 by trained security guards, and access is authorised strictly on a least privileged basis. Environmental systems are designed to minimise the impact of disruptions to operations. And multiple geographic regions and Availability Zones allows Moxion.io to remain resilient in the face of most failure modes, including natural disasters or system failures.

If you have any questions about security, please contact us.