Security

Our Commitment

We’re committed to providing a secure, private, and reliable environment for all our users. Our security practices are designed to safeguard your content across its lifecycle—from upload and processing to storage and delivery.

Data Protection

• End-to-End Encryption: All data in transit is protected using TLS 1.2+; data at rest is encrypted using AES-256 standards.
• Isolated Processing Pipelines: Each project is handled in isolated containers to minimize cross-access risks.
• Strict Access Controls: Only authorized team members have access to operational systems, governed by role-based access and multi-factor authentication (MFA).

Compliance & Data Residency

• US-Based Infrastructure: All data is stored and processed on secure servers located in the United States.
• Third-Party Provider: We leverage ElevenLabs for voice synthesis. Data shared with ElevenLabs is subject to their security and privacy practices, which align with industry standards.
• SOC 2 (In Progress): We are actively working toward SOC 2 Type I compliance, implementing rigorous internal controls to ensure security, availability, and confidentiality.
• GDPR-Aligned: While our infrastructure is based in the U.S., we follow GDPR principles for transparency, user consent, and data rights. EU users may contact us to request access, correction, or deletion of personal data.

AI Ethics & Model Safety

• No Data Retention Without Consent: We do not use customer-uploaded content to train our models unless we receive explicit permission.
• Hybrid TTS Pipeline: We use an ensemble of our own proprietary text-to-speech (TTS) models—trained on public datasets—and licensed commercial TTS models from leading providers like Google and ElevenLabs.
• Voice Cloning With Consent: When we clone a voice (e.g., from a 3M video), we do so only when Platy.Studio and the original speaker both have the legal rights to generate and use the synthesized voice output.
• Custom Voices, Securely Hosted: Unique AI voices created for your brand are isolated and stored in private, access-controlled environments.

Voice Rights & Usage

• Two Voice Options: Our dubbing system can use either (a) unique synthetic voices with a defined persona, or (b) cloned voices that match the style and tone of the original speaker—translated into new languages.
• Transparent Licensing: We only use TTS providers (e.g., Google, ElevenLabs) under commercial license agreements that permit our use cases.
• Ethical Voice Use: We follow a consent-first approach in voice cloning, and work only with voice data that is publicly licensed or legally authorized.

Infrastructure & Monitoring

• Cloud-Native Security: Our services are hosted on hardened, compliance-ready cloud infrastructure.
• Real-Time Monitoring: Logging, anomaly detection, and automated alerts help us respond rapidly to any abnormal activity.

Transparency & Incident Response

• Proactive Disclosure: If any data breach or security incident occurs, we notify affected users promptly and transparently.
• Rapid Response Team: A dedicated security and DevOps team is on standby to assess, contain, and resolve threats as quickly as possible.

Contact Us

Have questions, concerns, or a vulnerability to report?
Email our security team at contact@platy.studio