Enterprise video security for your most sensitive broadcasts
ISO 27001 certified and externally audited. AES-128 encryption in transit and at rest, access tied to your own identity provider, and a private bug bounty program.
Trusted by the world's most demanding enterprises
What a secure video platform has to cover
Company video often carries the most sensitive things an organization says out loud, such as results before they're announced, leadership briefings and product reveals. Protecting it comes down to controlling who can watch and keeping the video encrypted in transit and at rest.
StreamShark is a secure video platform for live and on-demand video, and it is ISO 27001 certified. Live streams and recordings are encrypted to the AES-128 standard in transit and at rest. Access is controlled either through single sign-on against your own identity provider or through viewer management, where you whitelist individual addresses and email domains. StreamShark is GDPR compliant, and both the privacy policy and the subprocessor list are published.
Single sign-on is available on Enterprise plans, and viewer management is included from the Team plan upward on the published pricing tiers. Hollywood-grade DRM is available as an add-on. For how StreamShark keeps streams on air, see streaming reliability.
ISO 27001 certified
StreamShark is certified to ISO 27001, the information security management standard, and that certification is externally audited. It covers people and process alongside the technology, and the certification is kept current through regular audits.
Access for employees and outside audiences
Employees sign in through your own identity provider with single sign-on, available on Enterprise plans. Partners, customers and anyone else outside your directory come in through viewer management, with open registration or a whitelist of addresses and domains, included from the Team plan upward.
AES-128 encryption and DRM
Every stream and recording is protected in layers. AES-128 encryption covers it in transit and at rest, and StreamShark DRM, included on every plan, is enough for most organizations. Where content needs hardware-backed protection on viewers' devices, such as pre-release material or licensed premium video, add Hollywood-grade DRM with Google Widevine, Apple FairPlay and Microsoft PlayReady.
A private bug bounty with HackerOne
StreamShark runs a private, invite-only bug bounty program with HackerOne, adding independent security testing of the platform on top of its ISO 27001 certification.
Sharing video that has to stay private? We'll show you the controls that keep it that way.
Book a DemoSee how StreamShark protects your content
Book a walkthrough of the access controls, encryption and DRM that keep your video with the right people.
Security questions we get asked
Yes. StreamShark is certified to ISO 27001, the information security management system standard, and the certification is externally audited. It covers the people and processes behind the platform as well as the technology, and it is kept current through regular audits.
Live streams and on-demand recordings are encrypted to the AES-128 standard, both in transit and at rest, and StreamShark's own DRM, included on every plan, covers what most organizations need. For hardware-backed protection, Hollywood-grade DRM is available as an add-on, using Google Widevine, Apple FairPlay Streaming and Microsoft PlayReady across live events, scheduled streams and on-demand video. Decryption keys go only to the protected DRM module on the viewer's device, and licenses are issued per viewer and per session.
Yes, two ways. Single sign-on, available on Enterprise plans, ties viewing rights to your existing identity provider, so someone who leaves the company loses access as soon as IT disables their account. For audiences outside your directory, viewer management, included from the Team plan upward, whitelists individual email addresses or whole domains. Supported identity providers and player watermarking are covered on the single sign-on page.
Yes. StreamShark is GDPR compliant, publishes a full privacy policy covering what is collected and how long it is retained, and maintains a public subprocessor list so your legal team can see which third parties are involved.
Yes, a private, invite-only program run with HackerOne. It adds independent security testing of the platform on top of StreamShark's ISO 27001 certification.
