Security

Built to protect unreleased work.

Rightsholders trust us with series that have not yet been licensed. This page sets out how the platform protects them, and the people who use it.
Contents
  1. 01Who gets in
  2. 02Screeners
  3. 03Data and infrastructure
  4. 04Deals
  5. 05Studio-grade protection
  6. 06Reporting a problem
Last updated 14 October 2026
01

Who gets in

There is no open sign-up. Every buyer and every rightsholder is reviewed by our team before their account can see the catalogue or list a title, and access can be revoked at any time.

Administration runs on a separate address with its own sign-in, apart from the public site. Admin accounts cannot sign in to the marketplace, and marketplace accounts cannot sign in to administration.

02

Screeners

  • Signed playback. Screeners can only be streamed with a short-lived token, issued to an approved account for one episode and valid for two hours. A copied link stops working.
  • No downloads. Episodes are stored for streaming only; no downloadable file is ever created.
  • Visible watermark.Every screening carries the viewer’s name, company and email, moving across the picture.
  • A record of every viewing. Each screening is logged, and the rightsholder can see who watched which episode and when.
  • Ownership checks.Before a token is issued we confirm with our video provider that the video really belongs to the episode being requested, so one account cannot point its listing at another studio’s footage.
03

Data and infrastructure

Access to data is enforced in the database itself, row by row: every request runs as the signed-in user, so deal rooms, messages and unpublished titles are readable only by the parties involved and our team, whatever page or tool asks for them.

The site is served only over HTTPS, with strict transport security and protection against being framed by other sites. Passwords are stored as secure hashes, never in plain text. We use no analytics or advertising trackers.

We build on established providers — Supabase for the database and sign-in, Mux for video, Vercel for hosting and Cloudflare for domains — each with its own independently audited security programme.

04

Deals

Nothing in a deal room is agreed until both sides have confirmed the same terms. Changing any term asks the other side to confirm again, and once agreed the terms are recorded on the deal and cannot be edited. Neither side can confirm on the other’s behalf.

05

Studio-grade protection

For titles that need it, we can add full DRM (Widevine, PlayReady and FairPlay) on top of signed playback. If a title you are listing requires DRM, tell us when you apply.

06

Reporting a problem

If you think you have found a security issue, or that a screener has leaked, write to support@dramabook.co.uk. Please give us a chance to fix an issue before making it public. We will not take action against good-faith research that respects other users’ data.