Sharing & Security

Sharing a video for review shouldn't mean losing control of it. PlayPause gives you a complete security layer around every link you send — password protection, expiring access, domain-restricted viewing, and dynamic watermarking — so your pre-release content stays in the right hands, for exactly as long as you need it to. Password protection · Expiring links · Domain restrictions · Dynamic watermarking · Access revocation Trusted by post-production houses, creative agencies, and media teams protecting pre-release content worldwide.

Share Video for Review — Without Sharing Control

Give Anyone a Secure Review Link in Seconds

One-click share links — no account required for reviewers

Generate a secure review link for any version of any video and send it directly to your client, director, or collaborator. They click the link, open the video in any browser, and start reviewing — no PlayPause account required, no plugin to install, no friction of any kind. The security lives on your end, not theirs.

Share links are scoped to a specific version

Every share link in PlayPause is tied to a specific version of a specific video. When you upload V4 and share it, the recipient sees V4 — not V3, not the final master, not anything else in the project. You control exactly what each link exposes and nothing more.

Multiple links per video — different settings for different recipients

Create separate review links for your internal team, your director, your client, and your legal reviewer — all pointing to the same video, each with different security settings. Internal team gets full access. The client gets a password-protected, watermarked, download-disabled link. Legal gets a link that expires in 48 hours.

No public video hosting — every link requires intentional access

PlayPause is not a video hosting platform. Nothing you upload is publicly discoverable. Every link is private by default and requires at least one layer of access control before anyone outside your team can see anything.

See Who Has Viewed Your Shared Links

Real-time view tracking

See exactly when a reviewer opened a share link, how much of the video they watched, and how many times they returned to the review. Useful for confirming that a client has actually seen the cut before chasing for feedback — and for knowing when to follow up.

Per-viewer access logs

Every access event on every share link is logged: the viewer's email address (if they were required to authenticate), the timestamp, and the IP address of the request. Useful for delivery confirmation, compliance records, and tracking unauthorised forwarding.

Notification when a link is opened

Set up alerts so you are notified the moment a recipient opens a review link. Know when your client has started watching the cut, without having to send a follow-up email asking if they received it.

Password Protection — Keep Every Link Intentional

Require a Password Before Anyone Can Watch

Per-link password protection

Set a unique password on any review link before you send it. Recipients enter the password when they open the link — before the video loads, before a single frame is visible. Only someone with the correct password sees the content. Forwarded links without the password go nowhere.

Separate passwords for different recipients

Because you can create multiple links for the same video, you can set different passwords for different recipients. Your agency team uses one password. The end client uses another. If one password is compromised or shared inappropriately, you revoke that link and issue a new one — the other links remain unaffected.

Password complexity and management

Set passwords of any complexity directly from the PlayPause share link settings. Change a password on an existing link without revoking it — the link URL stays the same, only the password changes. Useful for rotating access credentials mid-project without having to resend a new link.

No password — no preview, no bypass

Password protection in PlayPause is enforced server-side, not client-side. There is no way to bypass the password gate by manipulating the URL or using a cached version. The password check happens before any content is streamed.

Control What Happens After the Password Is Entered

Download restrictions regardless of password

Entering the correct password grants viewing access only. Download permissions are set independently. You can allow a client to watch the video with a password but still block them from downloading the file. View access and download access are two separate controls.

Watermarking applies regardless of password

Dynamic watermarking is applied at the stream level, not the access level. Even if a reviewer knows the password, the watermark with their name and email address is still embedded in every frame they see. Password protection and watermarking work together, not as alternatives.

Password entry is logged

Every successful password entry is recorded in the access log with a timestamp and IP address. If a shared password was used by multiple people, the access log shows you how many times and from which locations — giving you a clear picture of who has seen the content.

Expiring Links — Access That Ends When It Should

Set a Deadline on Every Link You Send

Date-based link expiry

Set any review link to expire automatically on a specific date and time. After that moment, the link stops working entirely — the video does not load, the password gate does not appear, the page shows nothing. No manual intervention required. Access ends precisely when you set it to.

Why expiry matters for post-production

Pre-release content has a lifespan. A rough cut shared for director notes should not still be accessible six months after picture lock. A commercial sent for client approval should expire before the campaign launches. Expiring links ensure that time-sensitive content has time-sensitive access — automatically, without relying on anyone remembering to revoke a link.

Countdown display for reviewers

Optionally display a countdown notice to the reviewer when they open a link that is close to expiry. They know the access window is closing and can complete their review before it disappears — without you having to send a separate reminder email.

Expiry does not delete the file

When a link expires, the video file remains in your PlayPause project untouched. You can generate a new link for the same file at any time with a new expiry date, new password, and new settings. Expiry controls access to the link, not the existence of the content.

Fine-Tune the Timing of Every Access Window

Hour-level expiry precision

Set expiry to the hour, not just the day. If a review session is scheduled for tomorrow morning and you want access to close by end of business tomorrow, set the expiry to 6pm on the dot. Precision matters when the content is sensitive.

Extend expiry without resending a link

If a client hasn't completed their review before the expiry date, extend the window directly from the PlayPause link settings — without generating a new link. The recipient uses the same link they already have; the expiry date updates in the background.

Bulk expiry management

At the end of a production, set all active links for a project to expire simultaneously. A single action closes access across every version, every recipient, and every link in the project — clean and immediate.

Review · frame-accurate comment

Domain Restrictions — Control Which Organisations Can Access Your Content

Restrict Viewing to Specific Email Domains

Domain-level access control

Set a review link to be accessible only by people with email addresses from specific domains. A link restricted to @brandname.com can only be opened by someone who authenticates with a @brandname.com email address. Anyone with a different domain — regardless of whether they have the link and the password — cannot access the content.

Restrict to multiple domains at once

Add more than one allowed domain to a single link. A production might allow access from @agency.com, @director.co, and @brandname.com — and no one else. Each domain is added individually and can be removed without affecting the others.

Why domain restrictions matter

Password-protected links can still be forwarded with the password. Domain restrictions close that gap. Even if a client forwards a link and the password to someone outside the approved organisation, that person cannot authenticate with a domain that isn't on the allowed list. The content stays within the intended organisation.

Domain restrictions combined with expiry and watermarking

PlayPause's security controls layer on top of each other. A link can simultaneously require a password, be restricted to specific email domains, expire on a set date, and watermark every viewer with their authenticated email address. Each control reinforces the others.

Manage Access at the Organisation Level, Not Just the Individual Level

Ideal for client portals and agency handoffs

When delivering content to a brand client or a media agency, domain restrictions let you define the entire organisation as the authorised recipient — rather than having to manage a list of individual email addresses. Anyone at the client company with the link and the correct domain can access it. Anyone outside cannot.

Change allowed domains without revoking the link

If a client changes agencies mid-project, update the allowed domains on the existing link. Remove the old agency domain, add the new one. The link URL stays the same. Access updates immediately.

Domain restriction logs

Every rejected access attempt — where someone tried to open a link with a domain that wasn't on the allowed list — is recorded in the access log. Useful for understanding whether a link has been forwarded beyond its intended organisation, and for identifying any unauthorised access attempts.

Dynamic Watermarking — Every Frame Carries the Viewer's Identity

Watermarks That Are Generated Per-Viewer, Per-Session

What dynamic watermarking means

A static watermark is an image burned into every copy of a video — the same for every viewer. A dynamic watermark is generated individually for each viewing session and embedded in the video stream in real time. If viewer A and viewer B both open the same link, they each see a watermark with their own name and email address on every frame.

Viewer identity embedded in every frame

PlayPause embeds the reviewer's name and email address directly into the video stream as they watch. If a frame from the video is screenshotted, screen-recorded, or otherwise captured and shared, the captured image carries the identity of the person who was viewing it at the time. There is no anonymous leak.

No quality compromise

PlayPause watermarks are designed to be visible enough to function as a deterrent and an identification tool, without obscuring the content for a legitimate reviewer. Positioning, opacity, and size are tuned for review use — present enough to be irrefutable evidence, unobtrusive enough not to interfere with a colour grade or compositing review.

Watermarking applies to streams, not downloads

Dynamic watermarking is applied at the stream level — it does not alter your stored original or proxy file. The watermark exists only in the stream delivered to each specific viewer. If downloads are enabled for a file, the downloaded file does not carry the stream watermark. Download restrictions should be used alongside watermarking for maximum protection.

Use Watermarking to Protect Content at Every Stage of Production

Rough cuts and assembly edits

Share early cuts for internal notes and director review with watermarking enabled from the start. Even at the rough cut stage, you know exactly who has seen what — and if a frame turns up somewhere it shouldn't, you know where it came from.

Client review and approval rounds

Every client review session is watermarked automatically when dynamic watermarking is enabled on the share link. The client sees the video with their name on every frame. They know the content is traceable. The deterrent effect alone reduces the risk of casual forwarding or screen capture.

Broadcaster and distributor submissions

When sharing content with a broadcaster or distribution partner for pre-clearance or approval, watermarking provides a documented chain of custody. If the content appears anywhere before broadcast, the watermark identifies the recipient who held the copy at the time.

Watermark on every version, not just the final cut

Watermarking is applied per link, not per file. Enable it on every link you generate for every version — rough cuts, VFX passes, colour reviews — and every viewing session across the entire production history carries an identity record. Not just the approved master.

Manage and Monitor Watermarking Across Your Projects

Watermarking enabled by default per workspace

Configure watermarking as the default setting for all new share links in your workspace. Every link generated carries watermarking unless explicitly disabled — ensuring your team can't accidentally share unprotected content by forgetting to enable it.

Watermark settings per link

Override the workspace default for individual links when needed. A link shared with your colourist for a technical colour review might have watermarking disabled to avoid interfering with the colour grade assessment. Every other client-facing link retains it.

Watermark in access reports

Every viewing session that took place on a watermarked link is recorded in the access report with the viewer's email, the timestamp, and the duration watched. If content is ever found in an unauthorised context, you have a complete record of who viewed it, when, and for how long.

Instant Access Revocation — Shut the Door in One Click

Revoke Any Link at Any Time

One-click link revocation

Any active share link in PlayPause can be revoked instantly. Click revoke in the link settings and the link stops working immediately — the next time anyone tries to open it, they see nothing. The file remains intact in your project. Only the access disappears.

Revoke without affecting other links

Because each share link is independent, revoking one link has no effect on the others. If you created three links for the same video — one for internal review, one for the client, one for a broadcaster — revoking the client link leaves the other two active and working.

When to use instant revocation

Revoke a link immediately when a project is cancelled mid-review. Revoke when a client relationship ends before a project is delivered. Revoke when you discover a link has been forwarded beyond its intended recipients. Revoke when a version is superseded and you don't want a reviewer accidentally watching the wrong cut.

Revocation is logged

Every revocation is recorded in the access log with the timestamp and the account that performed the revocation. Useful for audit trails and for demonstrating to a client or broadcaster that access to a particular version was terminated at a specific point in time.

Version compare · V2 vs V3

V2

V3

Security Across the Entire PlayPause Platform

Built-In Security at Every Layer

Encrypted storage and transfer

Every file stored in PlayPause is encrypted at rest, and every connection to the platform — including review link access — is encrypted in transit via HTTPS. Your content is protected from upload to playback, not just at the share link level.

Role-based workspace permissions

Define precisely who inside your team can see what. A freelance editor working on one project doesn't have access to the full workspace. A client services manager sees all active projects but can't access archived originals. Permissions are granular, auditable, and changed in real time without affecting ongoing sessions.

Two-factor authentication for team accounts

Team members who log into PlayPause can be required to authenticate with two-factor authentication. Combining a password with a secondary device-based verification significantly reduces the risk of unauthorised internal access — even if login credentials are compromised.

GDPR compliance and data residency

PlayPause processes and stores data in compliance with GDPR. Enterprise customers can configure data residency to ensure that all content and access records are stored on servers within their required region. Privacy policy compliance is documented and available on request.

Security Reports and Audit Trails

Full access log per link

Every share link in PlayPause has its own complete access log: every viewing session, every password entry, every rejected access attempt, every download, and every revocation. Logs are retained for the duration of the project and exportable at any time.

Workspace-level security report

Export a security report for your entire workspace: all active links, their settings, their access histories, and any flagged events such as rejected domain attempts or unusual access patterns. Useful for regular security reviews and for client reporting.

Delivery confirmation reports

For any link shared with a broadcaster, client, or distribution partner, export a delivery confirmation report showing that the content was accessed by the intended recipient, on the expected date, from the expected location. A professional audit record included with your delivery package.

Keep Security Synced With Your Existing Tools

PlayPause integrates with the tools your team already uses, so security settings travel with your files wherever they go in the pipeline. Slack · Email notifications · Google Drive · Dropbox · Webhooks / API · Zapier · SSO / SAML (Enterprise)

How To Start

• Free trial and demo. Try PlayPause free for 14 days. Book a walkthrough and we will configure your workspace's default security settings together — watermarking, password requirements, domain restrictions — so every link your team generates is protected from day one.
• Set your workspace security defaults. Define the baseline: whether watermarking is on by default, whether passwords are required, and which security settings your team can override per link. Defaults ensure consistent protection without relying on individual team members to remember.
• Share your first secure link. Upload a video, generate a link, and add your first layer of protection — password, expiry, watermark — in under two minutes. Send it to a client or reviewer. They open it in any browser, no account needed.
• Monitor access and manage links centrally. View all active links, their security settings, and their access histories from the PlayPause link management dashboard. Revoke, extend, or update any link at any time without contacting the recipient.

Approvals · logged sign-off

EditorProducerClient✓ Approved · locked

Sharing & Security Feature Highlights

PlayPause Security vs. The Old Way

See how PlayPause compares to the tools post-production teams typically use for sharing video — and why those tools are not sufficient for protecting pre-release content.

"We were sending password-protected Vimeo links, which gave us some protection, but there was no way to see if the right person actually opened the link, no watermarking, and no way to tell if the password had been forwarded. PlayPause gave us an actual security layer around every review link, not just a gate that's easy to walk around." — Post Producer, commercial production company

FAQ — More About PlayPause Sharing & Security

Do my clients need a PlayPause account to open a review link? No. Your client receives a link, clicks it, enters a password if required, and watches the video — all in any browser with no account, no download, and no friction. The security controls are all on your end. How does dynamic watermarking differ from a static watermark? A static watermark is the same for every viewer — typically a logo or project name burned into every copy. A dynamic watermark is generated individually for each viewing session and embeds the specific viewer's name and email address into the stream in real time. If viewer A and viewer B both open the same link, they each see their own name on every frame. Can I set different security levels for different recipients of the same video? Yes. Create multiple share links for the same video — each with different settings. Your internal team might get a link with no password and no expiry. Your client gets a password-protected, watermarked link that expires in seven days. Your legal reviewer gets a domain-restricted link that expires in 48 hours. All pointing to the same video. What happens to a video when a link is revoked or expires? Nothing happens to the video file itself. It remains safely stored in your PlayPause project, unchanged. Only the share link stops working. You can generate a new link for the same file at any time with updated settings. Can a viewer bypass domain restrictions by using a VPN or different email? Domain restrictions apply to the email address the viewer uses to authenticate — not to their IP address. A VPN does not bypass domain restriction. A viewer would need an email address from an authorised domain to authenticate, which cannot be faked through a VPN alone. Does watermarking affect the quality of the video the reviewer sees? Watermarks are designed to be present and identifiable without obscuring the content. Positioning, size, and opacity are tuned for professional review use. The underlying video quality is unaffected — the watermark is added to the stream, not re-encoded into the file. Is there a way to see if a password-protected link was forwarded to someone unauthorised? Domain restrictions are the most effective control for this scenario — even if someone forwards a link and the password, the recipient cannot authenticate with a domain that is not on the allowed list. Additionally, the access log shows every viewing session with its IP address and timestamp, which can reveal unusual access patterns. Can I extend a link's expiry date without resending the link to the recipient? Yes. You can extend the expiry date of any active link from within PlayPause link settings. The recipient uses the same link they already have — the expiry date updates in the background without any action required on their end. Are access logs and security reports exportable? Yes. Access logs for individual links can be exported as CSV. Workspace-level security reports and delivery confirmation reports can be exported as PDF or CSV for inclusion in broadcaster submission packages, client deliverable documentation, or internal compliance records. Does PlayPause support SSO for enterprise teams? Yes. Enterprise workspaces can integrate with SSO providers via SAML 2.0, allowing team members to log in to PlayPause using their existing organisation credentials. Contact us to discuss enterprise SSO configuration and advanced access control requirements.

Review · frame-accurate comment

Need More From PlayPause?

Approvals

Pair secure sharing with structured sign-off workflows. Multi-step approval chains, locked approvals with PDF certificates, and a full audit trail — so the security of your sharing and the formality of your approval process work together.

Media Storage

Your original files are stored securely in PlayPause — encrypted at rest, with access-controlled downloads. Security at the share link level is backed by security at the storage level.

Frame-Accurate Comments

Every link shared through PlayPause's secure sharing system is a full review environment. Reviewers drop frame-accurate, timecoded comments directly on the video — all within the same secured session.

Ready to Stop Sending Unprotected Links?

Every link you send for video review is either protected or it isn't. Try PlayPause free for 14 days and give every share link the security layer it should have had from the start. No credit card required. Trial ends automatically. Setup in under 10 minutes. Support from day one · All formats accepted · No client account required · GDPR-ready