Packing Video Security: Storage, Access and Retention
Packing video security at TrackVid means three things. Every video is stored in Amazon S3 and every transfer runs over HTTPS. Access is limited to your own users and the roles you set. Retention is 30, 60 or 90 days, with 60 days as the default, after which each video is deleted.
Where a control is not in the code, it stays a visible open item below.
What does packing video security cover at TrackVid?
Storage and transfer
Amazon S3 storage. Upload and playback run over HTTPS.
Access
Your own users only, limited by the roles you set.
Retention
30, 60 or 90 days. The default is 60, then each video is deleted.
Record of actions
Every claim keeps the user, the date and the action.
Where are packing videos stored, and how do they travel?
Every video is uploaded from the recorder to Amazon S3, with the desktop recorder pinned to the Mumbai S3 endpoint. Transfer runs over HTTPS both ways, up from the station and down when someone opens a video, and a presigned upload link expires after six hours.
No archive or cold tier sits in front of your videos, so any video inside its retention period opens in seconds. Capture and playback are covered on the video management system page.
Videos are your data, never shared with other sellers or third parties. See the privacy policy and terms and conditions.
{{TODO: founder to confirm whether S3 server-side encryption is enabled on the bucket}}
Until that is confirmed, this page claims encryption in transit only. HTTPS transfer is in the product code. Encryption of the stored object is not.
How are accounts and stored credentials protected?
- Passwords are hashed with bcrypt, so a readable password is never stored.
- Session tokens are stored only as SHA-256 hashes. A copied row is not a working session.
- Stored marketplace portal credentials are encrypted with AES-256-CBC. They are used only to file and track claims on your behalf, and can be withdrawn at any time. Filing runs on your own seller portal access using robotic process automation, as the claim automation page explains.
- Responses carry X-Content-Type-Options: nosniff and Referrer-Policy: strict-origin-when-cross-origin, so a browser does not guess a file type and a full URL does not leak to another site.
Who can see your packing videos?
Only the users inside your own account. Role based access control decides what each one opens, and you set it.
There is an admin role and a user role, and you can build your own with a permission map that grants one action in one area. A packer who only records does not need the claim screens. See the admin panel page.
Team members are unlimited with no per-seat charge, as the pricing page sets out, so nobody shares a login.
A video sent to a D2C customer on WhatsApp goes to the number on that order and nowhere else, as the D2C automation page covers.
How long are videos kept, and what happens then?
Retention has three values: 30 days, 60 days or 90 days, with 60 as the default. Pick the one that covers your longest claim window.
Deletion is not left to memory. Each video carries its own deletion date, set at capture, and a scheduled job removes it once that date passes. Favourited videos are kept until un-marked.
A customer cannot type in a custom period. Only a TrackVid system admin can add one, so ask the team if those three do not fit. Retention also sets part of the per-video credit, shown in full on the pricing page.
What record is kept of who did what?
Every claim carries a history: the user, the date, the action type and a description, from creation through every status change. Credit and storage events are recorded too.
When two people disagree about whether a claim was filed, the history settles it. See the feature pages.
What packing video security testing and certification can TrackVid show today?
TrackVid does not hold ISO 27001, ISO 27701 or SOC 2 certification today. This page states exactly what is in place.
{{TODO: founder to give the VAPT month and scope}}
An external security exercise was carried out and the fixes sit in the codebase with tests against them. No report is ready to hand to a prospect, so this page does not offer one yet.
Who do you talk to about a security question?
Support is TrackVid's own and built into the product: live chat on the dashboard, a ticket system that tracks every request to closure, plus phone, WhatsApp and email. No third-party chat widget. Tickets take attachments, support agents sign in with their own accounts, and large accounts get a named contact.
To report a security issue, email support@trackvid.in or raise it in the in-product chat. The about page says who you are writing to.
Packing video security questions sellers ask
Where does TrackVid store packing videos?
In Amazon S3, with every transfer over HTTPS, so any video opens in seconds for the whole retention period. You choose 30, 60 or 90 days of retention, and 60 days is the default.
Is TrackVid ISO certified?
No. TrackVid does not hold ISO 27001, ISO 27701 or SOC 2 certification today. This page states exactly what is in place.
Who can see my videos?
Only users in your TrackVid account, limited by the roles you set in the Admin Panel. Videos are never shared with other sellers or third parties. A video sent to a D2C customer on WhatsApp goes only to the number on that order.
Does TrackVid keep my seller portal password?
Portal credentials are stored encrypted with AES-256-CBC, used only to file and track claims on your behalf, and can be withdrawn by you at any time. Every claim filed under your account is visible to you.
What happens to videos after the retention period?
They are deleted. Each video carries its own deletion date and a scheduled job removes it when that date passes. Videos you mark as favourites are kept until you un-mark them.
Kya TrackVid ka data safe hai?
Videos Amazon S3 me store hoti hain aur har transfer HTTPS par hota hai. Sirf aapke account ke users, unke role ke hisaab se, videos dekh sakte hain. Kisi doosre seller ya third party ke saath data share nahi hota.
Does TrackVid keep a record of who did what?
Yes. Every claim carries a history of the user, the date and the action, from creation through every status change. Credit and storage events are recorded the same way.
How do I report a security issue?
Email support@trackvid.in or use the in-product chat and ticket system. Describe what you found and how to reproduce it; the team acknowledges reports and follows up through the ticket system.
Read next
Packing video security is a short conversation once the detail is written down. The two open items above stay visible until a founder settles them.
Last updated: 17 October 2026
See your own storage, roles and retention
Fifteen minutes, remote, with the dashboard open.