1. What we do
- Footage stays on set. We run no servers that receive, store or relay productions' video, audio, notes or chats. There's no cloud copy of anything you shoot.
- Local network first. Abby Monitor connects to the set's Mac over the set's own network. Remote viewing only works if the operator sets up their own private connection.
- Encrypted end to end. Live picture and sound are encrypted between the set's Mac and each approved device. Group chats are encrypted on each device, using Apple's standard cryptography (CryptoKit).
- Approval by the operator. Every device must be approved on the Mac, confirmed with a six-character code on both screens. The operator can remove any device at any time.
- Messages expire. Messages and group chats delete themselves after 24 hours, on the Mac and every device.
- Leak deterrents. The picture can blank during screen recording, and each viewer's name can appear faintly on their picture.
- Licensing. License keys are digitally signed. The signing key is held only in encrypted secret storage (Cloudflare) and on our own computer, and is never sent to customers. Payments are handled by Stripe, so we never see full card numbers.
- Little to lose. We collect only what we need to sell a license (see the Privacy Policy).
2. What you need to do
- Keep macOS, iOS and iPadOS, the abby. and Abby Monitor up to date.
- Protect the set's Mac with a strong password, FileVault disk encryption and a screen lock, and keep it physically secure.
- Use a private, password-protected Wi-Fi network for the set, not public or venue Wi-Fi where you can avoid it.
- Approve only devices you recognise, check the six-character code, and remove devices that no longer need access.
- Give Admin access only to people who need it.
- Protect drives with footage, and follow the production's rules for storing, copying and wiping media after a job.
- Keep your license codes and keys private.
3. No guarantee
No software, network or device is perfectly secure. We work to protect our products, but we can't guarantee that unauthorised access, interception, leaks or loss will never happen, including through devices, networks or people outside our control. Nothing on this page is a warranty. See the EULA and Terms of Service.
4. If something goes wrong
If we learn of a security breach affecting personal information we hold, we'll investigate it promptly, take steps to contain it, and notify affected people, and regulators where required, in the time and manner the law requires (in New Jersey, in the most expedient time possible and without unreasonable delay). Because productions' footage and chats stay on their own equipment, a breach of a production's Mac or network is that production's to handle, and we'll help where we can.
5. Reporting a vulnerability
If you think you've found a security problem in the abby., Abby Monitor, our license system or abbyvideo.com, email [email protected] with the details and steps to reproduce it. We'll acknowledge your report within five business days and keep you updated.
Safe harbour: if you act in good faith, avoid privacy violations, data destruction and service disruption, access only what you need to show the problem, don't use or keep anyone else's data, give us reasonable time to fix it before you disclose it, and follow the law, we won't pursue legal action against you for your research.
Please don't test against a production's set, devices or footage, use denial-of-service or social engineering, or test physical security. We don't currently offer paid bounties.
6. Contact
Security reports: [email protected].
Abby Video LLC, a New Jersey limited liability company. Email [email protected]. Our mailing address is available on request.