Security

Last updated: May 15, 2026

BlitzReels is a web-based video editing platform for uploading, processing, editing, and exporting video projects. This page summarizes the operational security posture for customers and agents evaluating the service.

Data handled

Account identity and workspace membership
Uploaded videos, images, audio, transcripts, captions, and project metadata
Generated media, exports, and AI-processing metadata
Billing records processed by Stripe
Product usage events used to improve reliability and workflows

Infrastructure

Web application hosting: Vercel
Authentication, database, and storage: Supabase
Media storage/CDN: Cloudflare R2
Background jobs: Trigger.dev
Video rendering: Remotion on AWS Lambda
Payments: Stripe

Access controls

Authentication is required for dashboard, media library, project, billing, and workspace routes.
Workspace membership controls access to projects and uploaded media.
API requests use bearer tokens scoped to the authenticated BlitzReels account/workspace.
Platform-admin controls are hidden from normal customer sessions and are treated as privileged operations.

AI and media processing

BlitzReels uses third-party AI and media-processing providers for transcription, image/video generation, voice generation, and related workflows. Uploaded or generated content may be sent to those processors when needed to provide the requested feature.

Transport and storage

Browser and API traffic uses HTTPS.
Media and database storage are provided by the infrastructure vendors listed above.
Payment data is handled by Stripe and is not stored directly by BlitzReels.

Customer responsibilities

Keep account credentials and API keys private.
Upload only content you have rights to process.
Review AI-generated captions, images, scripts, and edits before publishing.
Rotate API keys if they are exposed.

Incident or vulnerability reports

Email security reports to [email protected]. Include the affected URL or API route, reproduction steps, and impact. Do not access, modify, or exfiltrate data that does not belong to you.