Footage in, finished work out — one link per person, and nothing reachable without one.
Everything here is encrypted in transit and at rest, reachable only through a link or a sign-in the studio issued, and deleted automatically after thirty days. Every download is recorded against the person who took it.