AES-256
Encryption
Data is encrypted at rest using AES-256. Creative assets, feedback, approval decisions, and user data remain protected throughout the stages of the review process.
Enterprise security and SOC 2 compliance
StreamWork is SOC 2 Type II certified and built to meet the security and compliance requirements of enterprise marketing teams, in-house studios, regulated industries, and global organizations.
for ROI
SOC2
AES
Infrastructure
access controls
Trails
authentication
Security isn't a feature. It's a foundation
When enterprise marketing teams, creative agencies, and regulated industry organizations bring creative work into StreamWork, they're trusting us with their sensitive pre-launch assets, unreleased campaign creative, packaging artwork, regulatory documents, and proprietary brand materials. We take that responsibility seriously.
StreamWork's security program is built from the ground up for enterprise requirements, not added on after the fact. SOC 2 Type II certified. AES-256 encryption at rest and in transit. SSO. Role-based access controls. Two-factor authentication. Audit logs. Hosted on AWS with enterprise-grade infrastructure. Every control is designed to protect your creative assets and your organization's trust.
Security features
Enterprise-grade security controls, built in
AES-256
Single
Sign-On (SSO)
StreamWork supports SSO, allowing enterprise teams to manage access through their existing identity provider. Users authenticate with company credentials without creating or maintaining separate passwords.
Two-factor
Authentication
Two-factor authentication adds an extra layer of protection to every StreamWork account, helping prevent unauthorized access.
Role-based
Access controls
Set precise access controls at the workspace, project, and folder level. For approval workflows, role-based permissions determine what each team member or stakeholder can view, comment on, approve, upload, or manage.
Audit Trails
Approvals, revision requests, access events, and stakeholder decisions are logged, creating a record of the review process.
AWS
Infrastructure
StreamWork is hosted on Amazon Web Services with enterprise-grade infrastructure, redundancy, and reliability, helping keep creative assets secure, available, and protected at scale.
Penetration testing and vulnerability scans
StreamWork conducts regular penetration tests and vulnerability scans to identify and remediate security issues. Results are reviewed by our engineering and security teams and addressed within defined timelines.
Security Use Cases
Built for teams where compliance is a requirement
Enterprise marketing teams, CPG brands, financial services organizations, universities, and other regulated industries use StreamWork because the security and compliance controls meet their IT and legal requirements out of the box.
CPG and
consumer goods
Packaging artwork, regulatory copy, and pre-launch campaign creative moves through StreamWork with a complete audit trail and role-based access that ensures the right people see the right assets at the right stage.
Universities and
higher education
Marketing and creative teams at universities and higher education institutions use StreamWork to manage review and approval of campaign creative, branded content, and communications materials across departments, schools, and external agencies.
Role-based access controls keep assets organized, and the complete audit trail ensures every piece of approved content has a documented sign-off record.
Financial
services
Pre-launch marketing materials, compliance-reviewed creative assets, and regulatory copy decks move through StreamWork with structured approval routing, complete version history, and a record of every sign-off.
FAQs
Is StreamWork SOC 2 Type II certified?
Yes. StreamWork is SOC 2 Type II certified. Our SOC 2 Type II audit is conducted annually by an independent third-party auditor and covers security, availability, and confidentiality controls. Enterprise customers can request a copy of our SOC 2 Type II report by contacting our sales team or support@streamwork.com.
Does StreamWork support SSO?
Yes. StreamWork supports Single Sign-On. Enterprise organizations can configure SSO to authenticate users through their existing identity provider. SSO is available on Enterprise plans.
How does StreamWork encrypt data?
All data at rest and in transit is encrypted using AES-256. This applies to creative assets, feedback, approval decisions, user data, and audit logs.
Does StreamWork have an audit trail?
Yes. Every approval decision, revision request, and stakeholder action is logged with a name, role, timestamp, and decision. The audit trail is available for compliance review, legal discovery, or regulatory audit.
Where is StreamWork data stored?
StreamWork is hosted on Amazon Web Services (AWS). Enterprise customers with specific data residency requirements should contact our team.
How do I request StreamWork's SOC 2 Type II report?
Contact our sales team directly or email support@streamwork.com.