Data Security Policy

Security Principles

This policy explains how The DCP Company ("Company", "we", "our") handles, stores, and protects client materials during Digital Cinema Package creation and related post-production services. Our goal is simple: protect our clients' creative work with the same care we would apply to our own.

Core Principles

The DCP Company is committed to handling all client content with care, discretion, and professionalism. Our data practices are informed by industry best practices used in film post-production, including principles aligned with security, confidentiality, integrity, availability, and privacy. We believe trust is built through consistency, transparency, and respect for our clients' creative work.

File Transfer & Uploads

Clients may submit master files using secure file transfer services such as FileMail, Frame.io, Dropbox, Google Drive, or WeTransfer Pro or password-protected links. Only private or password-protected links are accepted, and public file links may be rejected to protect client materials. Upon receipt, files are checked for successful transfer and basic integrity before work begins.

Storage & Encryption

Active project files are stored on encrypted drives using modern full-disk encryption such as Apple FileVault with XTS-AES encryption. Security practices include password-protected storage drives, drives mounted only during active work sessions, and drives disconnected and securely stored when not in use. Client materials are not intentionally stored on unsecured personal devices.

Access Control

Access to project materials is restricted to personnel directly involved in the project. The DCP Company does not outsource production work.

Project Review & Delivery

Client review materials may be shared using secure review platforms such as Frame.io or similar services that allow password-protected access, timecode-linked comments, and restricted project visibility. Final deliverables may be provided through secure file transfer or physical delivery media depending on the project.

File Retention & Deletion

Project files are typically retained for up to one year after final delivery. After this period, files may be securely deleted to protect client privacy and manage storage resources. Clients may request earlier deletion of materials or extended retention when needed.

Confidentiality

Client materials are treated as confidential. The DCP Company does not publicly share screenshots, clips, credits, or project details without the client's written permission. All projects are handled under our formal NDA.

Third-Party Platforms

Certain trusted third-party services may be used as part of the production workflow, including services for payment processing, file transfer, project review, and website hosting. Examples may include platforms such as Stripe, FileMail, or Frame.io, and these services maintain their own security standards and privacy policies.

Security Limitations

While we take reasonable steps to safeguard client materials, no digital system can guarantee absolute protection against every possible risk. Clients are encouraged to maintain their own backups of all project files.

Contact

We welcome questions about our security practices. To request file deletion or discuss custom data-handling arrangements, contact support@thedcpcompany.com .