Security and privacy.

How Sotto Studio keeps each company's data separate, and what it keeps itself.

Your data

Each company runs on its own deployment and its own database.
Each company's database uses row-level security.
Editors never see a client's contact info, an order's price, invoices, or anyone's pay.

People sign in with a 6-digit code sent by email.
Wrong codes are counted on the server, not in the browser, and sign-in pauses for that email address after too many.
Sotto's accounts service pauses an address for 10 minutes after 3 wrong codes by default.
Passkeys sign in with WebAuthn on the company's own site.
Owners and admins need a 6-digit PIN emailed to them before they can open Connections or use a Connect button.

Keys for services such as Stripe, Mux and Twilio are set in the company's own Vercel environment, and no screen takes a key. A key saved earlier is still used until it has been moved there.

With Sotto AI switched on, the carve sends it frames to pick the best pass; with it off, or when it does not answer, Apple Vision scores each pass on the Mac.
With Sotto AI switched on, it labels a shoot's rooms; when it cannot, the room names are pre-filled on the Mac from the business's earlier shoots.
For a business without its own room names, Sotto AI describes each scene in a few words.
In Personal, the Photo and Sound AI steps send pictures and clips to the AI model provider's own file store.
Every picture and clip sent for an AI step passes the people check, and a clip always goes through an upload, never inline.
In Personal, an editor can send raw photos to AutoHDR; no people check is described for that send.
Speech in agent takes is read on the Mac, and when the usual model can't run, Apple's own on-device model reads it; nothing leaves the Mac.

sottostudio.media has no analytics.
A demo request is kept in Sotto's accounts database, and the form says Sent once it is kept.
Sign-in attempts are counted by a keyed hash of the address, never the address.
A signed-in person reads only their own rows in the accounts directory.

Book a Demo

Tell us a little about your studio and we'll set up a time to walk you through Sotto Studio.