Security at Mave
From the way we manage information to the tools you use to control access, security is part of how Mave works.
Sign in without a password. Choose how your tools connect. Decide when to protect playback. Clear choices that put you in control.
01 — Start with less data
Mave uses magic links to sign you in. Enter your email address and follow the link in your inbox to access your account.
There’s no Mave password to create, remember or reset. We don’t process customer passwords, keeping one more piece of sensitive information out of the platform.
Request a sign-in link using the email address for your account.
Open the email and use the link to sign in to Mave.
Your password stays out of the process. Less sensitive data for us to handle, less to manage for you.
02 — Control access
Connect Mave to your tools with authenticated API requests. When your videos need protected playback, use signed tokens to control access through the player.
Use a read-only API key when an integration only needs to retrieve information. Use a read-write key when it needs to create, update or delete videos and collections.
Requests without valid credentials are rejected. Keep your keys on your server and give each integration the access it needs.
Explore API authentication →Enable hotlink protection and have your application issue a signed playback token for a video, collection or space.
Set an expiry time to limit how long the token remains valid. Your application decides when to grant access; Mave checks the token for protected playback.
Explore protected playback →03 — Know your infrastructure
Knowing who handles your data is part of choosing a video platform. Mave is based in the Netherlands, with European-owned infrastructure for default video delivery on paid subscriptions.
Our provider overview explains the services involved, where they operate and what changes when you choose a different delivery option.
Review our infrastructure and providers →Paid subscriptions use Scaleway for default video content distribution from France.
The Test plan uses a different provider. Optional global distribution can move video assets outside the EU. Review the details to choose the setup that fits your requirements.
Check Mave’s status page for service updates and reported incidents.
View service status →04 — Keep getting better
Protecting information means managing risks, keeping responsibilities clear and improving how we work. It also means giving people a clear way to raise concerns.
Mave’s information security management system has achieved ISO 27001 certification, providing an independently assessed framework for this ongoing work.
Read about our certification →If you discover a potential vulnerability, our responsible disclosure policy explains how to report it confidentially, what to include and what to expect from us.
Send security findings to cert@mave.io. Please follow the policy when investigating and sharing a report.
Read our responsible disclosure policy →Built on trust
See how Mave brings these principles into your video workflow.
