Security
Security at capshak
The safest data is data that never moves. We built the rest with care.
Processing on your device
Decoding, preview, effects and encoding run in your browser. Captions need only a compressed audio file, which the server doesn’t keep.
Encrypted in transit
All traffic uses HTTPS, with standard security headers on every response.
Account protection
There are no passwords: you sign in with a single-use SMS code that is stored only as a hash, access tokens are short-lived, and you can see active sessions and sign out everywhere. Sign-in is rate-limited, and forms also have a captcha.
Isolated, temporary backups
Optional video backups are stored per user and project, play only through short-lived signed links, and are deleted automatically after the retention period.
Payments through the gateway
Plans are paid on mindio.ir through a bank payment gateway; capshak never sees or stores your card number.
Audit trail
Sensitive admin actions are logged, and the IP address of form submissions is stored only as a hash.