Security

Last updated: August 2026

Protecting your data and the integrity of the DubRelay platform is a top priority. This page describes the security measures we have in place and how we work to keep your videos, voice models, and account information safe.

1. Data Transmission

All communication between your browser and DubRelay is encrypted in transit using HTTPS and TLS. This includes page loads, file uploads and downloads, and any data exchanged with our APIs. We enforce secure connections and do not serve sensitive traffic over unencrypted channels.

2. Data Storage

Sensitive data is protected at rest through industry-standard practices:

• Passwords: User passwords are never stored in plain text. We hash passwords using bcrypt, a deliberately slow, salted hashing algorithm designed to resist brute-force attacks.
• API keys and credentials: Third-party API keys and service credentials are stored in encrypted form and accessed only when needed to perform a specific operation.
• Uploaded content: Video and audio files are stored in isolated, access-controlled storage and are regularly cleaned up after processing.

3. Payment Security

DubRelay does not store your credit card information. All payment details are handled by a third-party payment processor that is certified as PCI-DSS compliant. When you make a payment, your card data is transmitted directly to the processor and never touches our servers. We only retain the minimal billing metadata required to manage your subscription.

4. Access Control

Access to systems and customer data is tightly controlled:

• Role-based permissions: Internal access is governed by role-based access control (RBAC). Team members are granted only the minimum access required for their responsibilities.
• Administrator verification: Administrative accounts require two-factor authentication (2FA) and are subject to additional verification steps before accessing sensitive systems.
• Audit logging: Administrative actions are logged and reviewable to support accountability and incident investigation.

5. Video Processing and Cleanup

When you upload a video for dubbing, it is processed in an isolated environment. Once processing is complete and the result has been made available for download, the source and output video files are periodically cleaned up and permanently removed according to our retention schedule. This limits the amount of data we hold at any given time and reduces risk in the event of an incident.

6. Vulnerability Reporting

We welcome and appreciate responsible disclosure of security vulnerabilities. If you believe you have discovered a security issue in DubRelay, please report it to us immediately at support@dubrelay.com with a detailed description and, if possible, steps to reproduce. We ask that you:

• Give us reasonable time to investigate and remediate before any public disclosure.
• Avoid accessing, modifying, or destroying data that does not belong to you.
• Refrain from disruptive testing such as denial-of-service attempts.

We will acknowledge receipt of credible reports and keep you informed of our remediation progress.

7. Continuous Improvement

Security is an ongoing process rather than a finished state. We continuously review and improve our security measures, monitor our systems for threats, and update our practices as the platform evolves and as new risks emerge. We are committed to strengthening DubRelay's defenses over time.

8. Contact Us

If you have any security-related questions or concerns, please contact us at support@dubrelay.com.