
THE VAULT · ONE FLAT RATE
Screen-capture blocking, session and per-person forensic watermarks, encryption at rest, a tamper-evident audit chain — everything included, at $250 a month, regardless of volume, regardless of how much gets watched. No sales call, no quote, no minimum seat count. The rest of the field sells this category by negotiation; we publish the number. Nobody else does this.
THE VAULT
Vault a master and the web goes dark: no playback, no share pages, no downloads. Review happens in the dedicated macOS app — the file sits encrypted at rest (AES-256), the window is excluded from screen captures and Zoom/Teams shares, and every frame carries two watermarks that trace to a person: a session mark, and an invisible forensic one that survives re-encoding — even when copies are combined to wash it out (validated to three combined copies).
Additional seats: $175/month each — and every seat adds 1 TB hot + 1 TB cold. Every person carries their own identity and their own watermark.
Hollywood-grade security is normally an enterprise purchase: quote-only tiers, per-member pricing, seat minimums, contact-sales capabilities. Here is what each platform lists on its own vendor pages, read in August 2026 — nothing is estimated.

Read from vendor pages, August 2026 (MediaSilo re-read 2026-08-31). ¹ Frame.io's standard tiers are Pro $15 · Team $25 per member/mo (annual published as a per-year amount: $156 and $264 per member) — but DRM capture blocking and forensic watermarking are Enterprise Prime only and the session watermark is an Enterprise Select paid add-on, so the like-for-like tier is quote-only. ² MediaSilo's published per-user prices: Team $15/user with a 5-seat minimum (watermarking not listed); Pro — the tier that includes visual + forensic watermarking — $25/user with a 10-seat minimum, i.e. $250+/month; the billing term isn't stated. ³ Frame.io publishes no usage limits for forensic watermarking — if any exist, they live in the unpublished Enterprise contract. What its docs do state: the watermark is applied to Frame.io proxy files — never your originals — and downloads are limited to watermarked proxies. ⁴ Flow Capture debits “Forensic Watermarking minutes” per viewer per asset at the asset's full length regardless of how much is watched; MediaSilo (SafeStream) debits a pre-purchased bundle of watermarking minutes per unique viewer at first play — read from their help pages, 2026-08-31. What Vault ships, at a published flat price: capture blocking, session and forensic watermarks — the forensic one invisible, per person, built to survive re-encoding and up to three combined copies — encryption at rest and an audit log. One honest note: a camera pointed at the screen degrades the forensic trace from evidence to investigative lead.
And the price does not move with volume: streaming, viewers and plays are never counted — storage is the only meter, across the whole platform. Forensic watermarking is never metered either: elsewhere it is sold in “watermarking minutes” debited per viewer — at the full length of the asset, even for 15 seconds watched — or in pre-purchased bundles you top up by emailing customer success. Here, every vault stream carries the mark. Always. Included.
Six layers, all shipped, all verifiable today — the full technical detail lives on the security page.
Screen capture blocked at the OS
The playback window is excluded from the capture stream itself — screenshots, screen recordings, Zoom and Teams shares all composite black, fullscreen included.
Session watermark, burned in
The viewer's identity on every frame — in the frame, not overlaid on a page. The answer to the one attack no software can block: a phone pointed at the screen.
Invisible forensic watermark
A per-person fingerprint woven into the pixels — survives re-encoding, downscaling, recompression and a re-grade; collusion-resistant up to three combined copies, with a mathematically bounded false-accusation rate.
AES-256 encrypted at rest
Footage is encrypted before it ever rests on the viewer's machine — and a copied vault file is useless anywhere else. There is never a plaintext copy of your file on their disk.
Short-lived signed links
Signed URLs expire in minutes, so a forwarded link is dead long before it reaches anyone it was not meant for.
A tamper-evident audit chain
Sign-ins, opens, plays and capture attempts are recorded in a tamper-evident log — altering or deleting a record is detectable, so the record stands as evidence.
And security does not cost quality: Vault review happens in the macOS app, which plays R3D, BRAW, N-RAW and ProRes up to 8K 4:2:2 HQ at 60 fps — at up to 15,000 Mbps, with no transcode. The full model — including what we do not claim — is on the security page, and the watermarking duel on vs NexGuard.
Everything on this page: screen-capture blocking, a session watermark on every frame, an invisible per-person forensic watermark, AES-256 encryption at rest, short-lived signed links, the tamper-evident audit chain, live-from-camera ingest, and 2 TB hot + 2 TB cold storage — plus every feature of the tiers below it. Additional seats are $175/month each, and each seat adds 1 TB hot + 1 TB cold.
Yes. Storage is the only meter on the whole platform — streaming, viewers and plays are never counted. There is no per-member fee for review: clients review through an email invitation and are never billed. When you need more storage, à la carte blocks are +$40/TB hot and +$20/TB cold.
By sales call. NAGRA's NexGuard publishes no pricing of any kind — every button on the product pages leads to a contact form. Frame.io gates forensic watermarking and DRM capture blocking behind Enterprise Prime and the session watermark behind an Enterprise Select paid add-on — all quote-only tiers. MediaSilo's watermarking tier (Pro) is $25 per user with a 10-seat minimum — $250+/month, and per-user from there. Flow Capture publishes no price — and meters the capability in “Forensic Watermarking minutes”, debited per viewer at the asset's full length. Vault publishes the number, with no meter.
No. Vault review happens in the macOS app, which plays camera originals natively — R3D, BRAW, N-RAW and ProRes up to 8K 4:2:2 HQ at 60 fps — at up to 15,000 Mbps, with no transcode. Security and full-bitrate review are the same pipeline.
Three honest edges. Nothing stops a camera pointed at a screen — capture blocking defeats software recording, not physics; that is what the watermarks are for, and a phone-of-screen capture degrades the forensic trace from evidence to investigative lead. A downloaded original is attributable through the audit chain, not marked. And FairPlay DRM is still on the roadmap, not shipped — everything above is in the product today, and you can verify it yourself in about a minute: vault a clip, then try to screenshot it.
Subscribe, vault a clip, try to screenshot it. It takes about a minute — and the price you read is the price you pay.