← Trust Centre

Security Overview

Trosolwg Diogelwch

Last updated: March 2026

Capsiynau is a professional transcription and captioning platform built for broadcasters, educators and public sector organisations. Security and data protection are core design principles — not afterthoughts.

This page explains the key security measures that protect your data.


Encryption

Data in Transit
All communication between your browser and Capsiynau is encrypted using TLS 1.2 or TLS 1.3. Your files and transcripts are never transmitted without encryption.

Data at Rest
All stored data — including uploaded files, transcripts and account information — is protected using AES-256 encryption.


Access Control

Capsiynau enforces strict access controls to ensure that only authorised users can access your content.

  • Authentication — secure email and OAuth sign-in
  • Role-based access — owner, admin, member, viewer and freelance roles with appropriate permissions
  • Row-level security — database policies ensure users can only access their own organisation's data
  • Superadmin separation — system administration is restricted to named individuals

Data Isolation

Your data is logically isolated from other organisations on the platform. Capsiynau uses row-level security (RLS) policies to enforce this at the database level — ensuring that no user can access content belonging to another account.


Infrastructure Security

Capsiynau is deployed on secure cloud infrastructure:

  • Vercel — serverless API with global edge network
  • Supabase — managed Postgres database with built-in security controls
  • Cloudflare R2 — encrypted object storage with S3-compatible access controls
  • Railway — isolated worker container for background processing

All infrastructure providers maintain physical and network security controls within their data centres.


Monitoring & Logging

Capsiynau maintains operational logs for security monitoring and service stability. Logs may include authentication events, API usage statistics, and system errors. Logs are retained only as long as necessary for security monitoring purposes.


Responsible Disclosure

If you discover a security vulnerability in Capsiynau, please report it responsibly to: security@capsiynau.com

We aim to acknowledge reports within 48 hours and resolve confirmed issues promptly.