SolutionsWidevine
Confidential internal briefing
Board and results material with a named audience
Checking this device
Reading the DRM capabilities your browser reports.
Content: Shaka test asset (Angel One, Widevine). Licence: public test server, no authentication.
This device
- Widevine
- checking
- PlayReady
- checking
- FairPlay
- checking
- Highest robustness
- checking
- Policy decision
- checking
Licence log
- The watermark here carries an example viewer identity. In a deployment it is rendered for each session, so no two people see the same frame.
- Playback uses Google's public Shaka test video and an unauthenticated test licence server. No real briefing content is involved.
The problem
Results briefings, board packs and restructuring announcements get recorded so that people who missed them can watch later. The recording then sits in a file share with link sharing turned on, and that is how a pre-announcement briefing reaches a journalist. Here accountability matters more than strong encryption: a named audience, a licence you can withdraw before the content is public, and a watermark that ties a forwarded recording to whoever was signed in.
What this demo shows
- Access by a list of named recipients
- A watermark identifying the viewer, so a leak can be traced
- Why revocation matters more than licence length for embargoed material
- A 24-hour licence that expires without anyone having to remember to remove access
- The licence log that records who watched what, and when
The policy, and why it is set this way
Each setting trades protection against convenience. The settings that suit exam video would make compliance training unwatchable for many of the staff who need it.
- EntitlementNamed recipient list
- Access is given to a list of people. If someone forwards the URL, the next person is refused a key.
- Licence duration24 hours, revocable
- Embargoed material needs a way to stop access. Revocation blocks new licences immediately, and existing ones expire within the day.
- Concurrent devices1
- One session per person keeps the licence log an accurate record of who watched.
- OfflineRefused
- An offline copy of an embargoed briefing is exactly what you are trying to prevent.
- RobustnessSW_SECURE_DECODE
- The audience is executives on corporate laptops. The likely leak is a forwarded link or a phone pointed at the screen, so the watermark and the log protect more than a higher robustness level would.
- Output protectionNot required
- Briefings are shown in meeting rooms on whatever screen is plugged in. Blocking that would stop legitimate use and do little against a leaker holding a phone.
Related product
Confidential internal briefing is a use case for Licence Gateway: DRM licences under one policy model.
Read about Licence GatewayThe other solutions
Each uses Widevine with a different policy.
Video projects without DRM
Uploads, encoding, live, captions and analytics on Cloudflare.
- Serverless video platformUploads, encoding, captions and signed playback with no servers to run
- FFmpeg encoding on Cloudflare ContainersYour own ladder and packaging, started by an upload, served from R2
- Sub-second live with WHIP and WHEPLive auctions, Q&A and watch-alongs where a few seconds of delay is too much
- Searchable video archiveFind the moment in hours of recordings by what was said
- Thumbnails and previews by URLHover previews, thumbnails and storyboards for a clip library, with no batch jobs
- Instant clips from a live streamViewers clip the moment they just saw and share it while the event is still on
Talk about your own content
Training, assessment, or confidential internal video. Tell us what has to be protected and from whom.
128 City Road, London, EC1V 2NX, United Kingdom
17420568
Registered in England and Wales