ondaclipSecurity
Your data stays yours, wherever Ondaclip runs.
On Ondaclip Cloud, hosted by Ondaclip, or in your own infrastructure if your policies require it. This page covers both: what happens where, and who can do what.
Ondaclip Cloud
Hosted by Ondaclip, isolated for you.
Nothing to manage. Here's what Ondaclip stores for you, and how it stays yours.
Shoots leave nothing behind
Nothing from a shoot is kept except your videos and what your review needs.
Your workspace, isolated
Your workspace is isolated from other customers. They never see your products, shoots or videos.
Your demo accounts
Encrypted, used only to sign in during your shoots, and never shown, not even to you. Someone on your team adds them in the studio.
AI models and voices
Managed by Ondaclip and included in your plan. Nothing to set up.
The published videos
Stored privately for your product. Only your product can access them, and they're never public by default.
None of your code runs
Ondaclip reads your tutorial and settings files. It never runs scripts from your repository.
Your infrastructure
Everything Ondaclip uses stays with you.
In your own Google Cloud project. Your accounts, screens and videos never leave it.
Shoots run on your side
Each shoot runs in your project, and nothing keeps running afterward.
Private storage
In your project. Shoot files are deleted after 30 days.
Your demo accounts
In your Secret Manager. Someone on your team adds them. They're used only to sign in during your shoots, and never shown.
AI models
Called from your Google Cloud project, billed to you and under your policies.
The published videos
Stored privately in your project. Only your product can access them, and they're never public by default.
The costs
Ondaclip resources are labeled, and a budget alert tracks them.
Control and data
Ondaclip runs the controls. You keep the data.
IT teams always ask what the vendor can see. Here's the full answer for your infrastructure. On Ondaclip Cloud, Ondaclip holds the right-hand side for you, isolated per workspace.
Permissions
Minimal permissions you can revoke.
In your infrastructure. On Ondaclip Cloud, there's nothing to grant.
You grant a setup permission
The studio shows you this permission and checks it's in place before creating anything.
The studio prepares your project
Two accounts with minimal roles, private storage, a machine template and a secret for your demo accounts. You see the plan first.
The setup permission is handed back
When it's done, the studio keeps only what it needs.
Two accounts with minimal roles
One starts the shoots, the other films. Each has only the permissions it needs. You can remove them at any time.
What stays human
A person is in charge at every step.
- Your team approves each script, then each video.
- Publishing stays a human act.
- You choose which environment is filmed: your demo environment by default, with fictitious data.
- During a read-only shoot, every write to your product is blocked.
- For your code, the studio gets one-hour GitHub access to a single repository.
Questions
What your IT team will ask
Where does Ondaclip run?
On Ondaclip Cloud, hosted by Ondaclip, with nothing to install. Or, if your policies require it, in your own infrastructure (Google Cloud today), where your accounts, screens and videos never leave it. Your product itself can be hosted anywhere.
On Ondaclip Cloud, are we isolated from other customers?
Yes. Your workspace is isolated from other customers. They never see your products, shoots or videos. Nothing from a shoot is kept except your videos and what your review needs. No code from your repository runs on Ondaclip Cloud.
Can Ondaclip see our demo account passwords?
No. Someone on your team adds them. They stay encrypted, are used only to sign in during your shoots, and are never shown, not even to you: not in the studio, not in the logs.
Can a shoot change our data?
Ondaclip films the environment you choose: your demo environment by default, with fictitious data. During a read-only shoot, every write to your product is blocked.
What access does Ondaclip have to our code?
A GitHub token that lasts one hour, for a single repository, for each shoot. Nothing more.
Can we revoke Ondaclip's access?
Yes, at any time. In your infrastructure, Ondaclip uses two accounts with minimal roles: one starts the shoots, the other films. The setup permission is handed back to you at the end.
Are the videos public?
No, never by default. They're saved to private storage that only your product can access, and someone on your team approves each video before it's published.
The engine
Ondaclip ships the engine in versions. On Ondaclip Cloud, Ondaclip runs it. In your infrastructure, only your project's filming account uses it. You pick the version and upgrade when you're ready.