Security
It is your footage. It stays that way.
Everything on this page is something Manifest Post has already promised in writing, in the agreement every early access member signs.
Your footage
Your camera originals stay on your drives
Unless you choose to put them in the cloud, the originals never leave the drives you put them on. B/side uploads lightweight copies for editing.
Your only copy is never changed
Cards and drives are read, never written to. Nothing on a card is moved, renamed or deleted.
Unaired is confidential, marked or not
Footage, sound, cuts and schedules you put into the product are your confidential information, and unaired programmes are treated that way whether or not anybody marks them.
What we can and cannot do with it
We do not look at it
Your material is opened only when you report a problem and ask us to, or to investigate a security or technical fault. What we keep to fix a problem is deleted when the problem is closed.
Never shown, sold or used in marketing
Your material is never shown to anyone outside Manifest Post, published, sold or handed to a third party, except the providers that host the service under terms no weaker than ours.
We never train AI on your media
Nothing your programme shows or says is used to train a model, or to build our tests and demos, unless you give separate written permission for that specific material. You can take that permission back at any time. What we do learn from is how the work gets done, such as file details and edit timings. That data is stripped of your name and your projects before we keep it.
Only what you ask for goes out
Today one feature uses an outside AI service, and only when you use it: transcription sends the audio of the clips you choose. It never receives your pictures or your cuts. When the in-app assistant switches on, it will send your question with a short summary of your project’s status, and never your footage. The full list is on our subprocessors page.
Your machines and your network
The desktop helper only calls out
It runs on the machines you choose, with the access you give it. It makes outbound connections only and accepts none coming in, so nothing new is exposed on your network.
Encrypted in transit
Everything between your machines and the service travels encrypted, and access is limited to the accounts you authorise.
Insured
Manifest Post carries technology errors and omissions and cyber liability insurance, with $1 million limits.
Told within 72 hours
If we learn of unauthorised access to your material, we tell you without undue delay and within 72 hours of confirming it, and we work the response with you.
Found a security problem?
Tell us at kev@postmanifest.com. Include what you found and how to see it, and we will reply to confirm we have it.
- Please give us a reasonable time to fix it before you tell anyone else.
- Test only against your own account and your own material, and never against anyone else's footage or projects.
- We will not pursue anyone who reports a problem to us in good faith and follows these points.
Machine-readable: /.well-known/security.txt
Read the promise itself
The full terms are in the Early Access Agreement. Sections 3, 3A, 7 and 8 cover your material, what we may learn from your use, the desktop helper and security.