Video retentionlive
Rendered videos are kept for 7 days in the current product model and customers must download exports they want to keep.
Compliance
Transparency, privacy, security, provenance, and responsible AI information for FormoVox.
Operational controls
Current runtime truth for retention, region visibility, and core provider readiness.
Data region visibilitylive
Configured object-storage region is eu-central.
Upload storage modepartial
The current runtime still uses local object storage rather than a production external bucket.
Generated content provenancelive
Generated assets keep provenance metadata so uploads, generated outputs, subtitles, and previews remain distinguishable.
Customer trust surfaces
What customers can honestly expect today for auth, billing, export, and deletion-related workflows.
Email deliverylive
SendGrid is configured for transactional mail from no-reply@formovox.com.
Abuse and registration challengepartial
Turnstile contract support exists, but this runtime is still missing enforced live challenge configuration.
Billing provider lifecyclelive
Stripe checkout, subscription lifecycle, invoices, and portal flows can run provider-backed in this runtime.
Data export and deletion handlingpartial
Authenticated downloads and operator-side audit/deletion foundations exist, but a finished customer self-serve privacy workflow is still pending.
Enterprise readiness
What enterprise buyers get today versus what still depends on contract, deployment, and provider setup.
Enterprise onboardingpartial
Enterprise onboarding now includes activation, deployment mode, retention, DPA, subprocessor review, integrations, and acceptance proof as tracked steps.
SSO and identity requirementspending
SSO readiness is represented in the onboarding and todo scope, but live SSO provider setup is not finished yet.
Direct publishing provider proofpartial
YouTube OAuth foundations exist, but real provider proof still depends on external Google setup and a test channel.
Compliance review pathlive
Public compliance, legal, DPA, security, subprocessor, and responsible-AI routes are live and linked from the public footer.
Subprocessor register
This register lists the providers that are actually wired into the current runtime shape. It must stay truthful and must not invent vendors that are not in use.
PostgreSQLactive
Primary relational data store
localactive
Asset and upload storage
SendGridactive
Transactional email delivery
Stripeactive
Billing and invoice provider
Cloudflare Turnstileactive
Registration and abuse challenge
YouTubeactive
Optional direct publishing target