Security & privacy

Your scripts, footage and keys stay yours.

SeriousPixel Studio is local-first. Projects live on your drives, keys live in your operating system’s keychain, and nothing leaves the machine unless you’ve connected a service to send it to.

Security principles

Local-first projects

A project is a plain folder on a drive you choose, with Git history and hash-addressed media. Your project content never passes through SeriousPixel servers — team sync runs through your own NAS, Git host or bucket.

Keys in the OS keychain

Provider keys are stored in the macOS Keychain or the platform credential store — never in the project folder, never in an archive, never in an export.

Local-only switch

One switch, globally or per project, disables every cloud adapter. Scripts, boards and footage then stay on the machine, and SP Studio shows where quality may differ.

No training on your work

SeriousPixel does not train on your projects. Where providers offer no-training API settings, projects can require them, and the router won’t send work to an engine that breaks the project’s data policy.

Analytics are opt-in

Usage analytics are off by default — studios working under NDA shouldn’t have to go hunting for a switch. The in-app feedback button attaches a job log without any media.

Process isolation

The interface runs sandboxed. A single core service is the only part with file and network access, and the inference service restarts on its own, so a crashed GPU job never takes the project down with it.

Provenance & disclosure

An honest record of how every asset was made.

Provenance stays available without getting in the way. It’s there when a client, a platform or a lawyer asks.

  • Shot log on every take — engine and version, full direction, reference hashes, seed, parameters, cost and license terms.
  • Imported media is marked as imported, so generated and captured material are never confused.
  • Labeling checklist at Deliver for platform and regional disclosure rules, with provenance metadata embedded in masters.
  • Consent records for every voice and face, and real-person generation blocked by default.
  • Version history documents the human creative direction behind each approved cut.

Licensing that respects the work

A license check never stops a render.

Online or offline activation

Studio-plan customers on locked-down or air-gapped networks can activate offline.

Never in the way

License checks never block work on an external drive or interrupt a render in progress.

Portable projects

Machine-specific settings — volumes, compute profile, keys — live outside the project, so a restored project opens cleanly on a new computer.

Reporting a security issue

If you believe you’ve found a security issue in SeriousPixel Studio, please tell us through the contact form and choose “Security report” as the topic. A dedicated security contact and disclosure policy will be published before general availability.