Secure Online Video Platform

A secure and reliable platform built for leading global organizations

Whether your videos are for general external audiences or private internal ones, Brightcove makes it easy to securely deliver high-quality video experiences to any device. With support for the most sophisticated studio-grade content protection and advanced security features like watermarking, domain and IP restrictions, and geo-restriction, Brightcove helps you deliver even the most sensitive video content with security, control, and confidence.

Cloud computing shared security model

Brightcove’s online video platform is a Software-as-a-Service (SaaS) platform that is built to provide both a secure and reliable foundation for a broad set of capabilities that help customers scale and manage their video content. Customer data is hosted in a multi-tenant environment, but segregation is integrated into the application at the customer level. We also offer the option to only store master videos in a region selected by the customer. For example: If a customer is tied to us-east-1 their masters won’t leave that region. Brightcove follows a secure platform development model including enforcing encryption standards for all data in transit, employee compliance with documented data storage protocols, and user authentication when using the product.

Role-based access control & data security

Brightcove implements strong user access control measures for our customers. Our studio allows customer administrators to delegate administration tasks via a “user admin” role, which allows limited user-related tasks such as the creation or deactivation of users. Administrators can configure the Brightcove Studio so that user access can be restricted to specific modules (Media, Publishing, Advertising, Analytics). This can be restricted based on an individual user’s role to limit who has access to change players, media files, metadata, and policies.

Security-conscious organizations rely on Brightcove because security is our number one priority when it comes to customer data. Brightcove offers rigorous security features like IP restriction, URL tokenization, single sign-on, AES encryption and more. We ensure your video gets to the right people, while keeping all your video content secure.

Certifications

As a global organization that serves thousands of customers around the world the equivalent of hundreds of years of video a day, securing our customer data is mission critical and information security is an area Brightcove takes very seriously. The Brightcove Information Security team oversees the creation of and adherence to security policies, processes and standards which are aligned with ISO 27001.

Additionally, we are on the CSA STAR registry as a Level 1. Level 1 indicates we have participated in the self-assessment to demonstrate how we comply with CSA-published best practices.

Trust and security

Security at Brightcove

Brightcove does not currently have a Bug Bounty Program in place. The Security team is working on creating a Security Hall of Fame.

Report a vulnerability

If you believe you have found a security issue in a Brightcove product, please submit the report to our Security team by emailing security@brightcove.com.