Skip to content

Security

Control exactly who gets to watch

Layered protection — encryption, expiring tokens, domain locks and regional rules — applied per stream or across your whole account.

At a glance

  • AES-128 encrypted delivery
  • Custom secure tokens with configurable expiry
  • Country-level allow and deny lists
  • GDPR-aligned processing and DPA available

What video security gives you

Restricted content needs more than an unlisted link. CastNest gives you several independent controls that stack, so you can combine protections to suit your access requirements.

  • AES-128 encryption

    Media segments are encrypted in transit and keys are issued only to authorized players.

  • Signed, expiring tokens

    Generate playback URLs that stop working after a window you define, so a shared link goes dead quickly.

  • Domain allowlisting

    Restrict an embed to the domains you name — copied onto any other site, the player simply refuses to load.

  • Geo-blocking

    Allow or deny playback by country to honor broadcast rights and licensing territories.

  • Password protection

    Put a straightforward password gate in front of a stream when a full paywall would be overkill.

  • Privacy compliance

    GDPR-aligned data handling with an EU processing option and a signable data processing agreement.

CastNest video security preview

Frequently asked questions

Common questions about video security on CastNest.

How does geo-blocking work?

You choose an allow list or a deny list of countries per stream. Viewer IP addresses are resolved at the edge, and requests from blocked regions are refused before any media is served.

What is a secure token and when should I use one?

A secure token is a cryptographic signature appended to a playback URL that encodes an expiry time. Use it for paid, confidential or internal content — after the window closes, the same URL no longer plays.

Is CastNest GDPR compliant?

Yes. We process personal data under GDPR-aligned terms, offer EU-based processing, and provide a data processing agreement for customers who need one on file.

Get ready for your next broadcast

Start a 7-day free trial on Starter, connect your destinations and go live. No card required to begin.