Security
Security
Film productions often involve material that is confidential, commercially sensitive or not ready to be public.
Film Tools is designed to protect that material while keeping collaboration simple. This page describes the technical and organisational measures currently used to protect Film Tools, user accounts and production data.
Infrastructure and Hosting
Film Tools uses established cloud infrastructure providers.
The public website, Film Tools applications and identity service are separate parts of the platform. The public website cannot access the contents of projects stored inside Film Tools, and information submitted through website forms is kept separately from project data.
Current infrastructure includes:
| Service | Provider | Location |
|---|---|---|
| Website and Film Tools application data | Cloudflare | European Union |
| Identity service | Google Cloud | Belgium, European Union |
| Identity database | Neon | Frankfurt, Germany |
| Global content delivery | Cloudflare | Nearest available Cloudflare location |
Cloudflare may process requests outside the European Union when delivering the service through its global network. Further information about international transfers is available in our Privacy Policy.
Authentication
Film Tools uses a dedicated identity service based on Keycloak.
Individual Film Tools applications do not receive or store user passwords. The identity service authenticates the user and provides the applications with the information required to identify the account.
Passwords are stored only in a non-readable hashed form and cannot be retrieved as plain text.
Accounts are currently created by Film Tools or by an authorised project administrator. There is no open public registration.
Access Controls
Access to production material is organised around projects.
Project administrators control who belongs to a project and the level of access each person receives.
In Storyboard, current access levels include:
- Admin
- Collaborator
- Commenter
- Viewer
Users only receive access to projects to which they have been added.
Production Data
You retain ownership of material uploaded to Film Tools.
Film Tools processes project material only to provide the service to you and the people you authorise.
We do not review project material for our own purposes and do not use production material to train AI models.
Storyboard currently stores information including frames, project and board information, comments and project change history.
Share Links
Storyboard allows a board to be shared with someone who does not have a Film Tools account.
Share links are read-only.
A person using a share link cannot see:
- the project's member list;
- internal comments;
- project history.
Every share link has an expiry date and can be disabled by the project team before that date.
Links may also be password protected.
Share-link addresses and passwords are stored only as cryptographic fingerprints and cannot be read back from the database.
Activity History
Storyboard maintains a history of project changes, including who made a change and when it occurred.
This allows production teams to understand how a shared board has changed and who made those changes.
Data Collection
Film Tools follows a principle of collecting only the information required to provide the service.
The public website does not use advertising trackers or analytics cookies.
People accessing a Storyboard through a share link do not need an account, and Film Tools does not create a record identifying who opened the link.
Inside Film Tools, browser cookies are limited to those required for authentication and maintaining a signed-in session.
Data Retention and Deletion
Account information is retained while an account remains active.
Production material is retained while the relevant project exists.
Users can request complete deletion of an account, project or stored files. Further information is available in our Privacy Policy.
Sub-Processors
Film Tools relies on a limited number of infrastructure providers to operate the service.
Current providers include:
- Cloudflare: application infrastructure, data storage and content delivery.
- Google Cloud: hosting of the Film Tools identity service.
- Neon: database infrastructure for the identity service.
Our current data-processing arrangements and locations are described in our Privacy Policy.
Early Access
Film Tools is currently in early access.
Security is part of the development of the platform, but early-access software continues to evolve. Users should maintain independent copies of production-critical information and should not use Film Tools as the sole record of information required for safety, payroll, contractual or other critical production processes.
Responsible Disclosure
If you believe you have discovered a security vulnerability in Film Tools, please tell us before making the issue public.
Please do not attempt to access, modify or download information that does not belong to you.
Send sufficient information for us to understand and reproduce the issue to:
We will investigate legitimate security reports and take appropriate action where a vulnerability is confirmed.
Security Questions
Production companies, agencies and other organisations may require additional information before approving Film Tools for use.
For security questions, supplier-security reviews or Data Processing Agreements, contact:
For privacy and data-protection matters: