Security

Security, privacy and consent

Media is valuable and voices are personal. This is how Castix products treat both.

01

Your data stays where you put it

Hosted services run in the region you choose. On-premises and source licences keep media inside your own network.

02

Consent for voices

Voice cloning needs the speaker's recorded consent. Clones are used for the job and then deleted, and consent records are kept.

03

Tenant isolation

Every product is multi-tenant by design, with per-tenant keys, limits and audit logs.

04

Signed webhooks

Events are signed with HMAC-SHA256 so your systems can verify they came from us.

05

Evidence integrity

Monitor seals each clip with a SHA-256 hash at capture.

06

Honest claims

We do not list certifications we do not hold. When we complete an audit, it will appear here with its scope.

We process personal data under the GDPR principles of purpose limitation and data minimisation. Contact us for a data processing agreement. Privacy notice