Security at Mave
From the way we manage information to the tools you use to control access, security is part of how Mave works.
Sign in without a password. Choose how your tools connect. Decide when to protect playback. Clear choices that put you in control.
Mave uses magic links to sign you in. Enter your email address and follow the link in your inbox to access your account.
There’s no Mave password to create, remember or reset. We don’t process customer passwords, keeping one more piece of sensitive information out of the platform.
Request a sign-in link using the email address for your account.
Open the email and use the link to sign in to Mave.
Your password stays out of the process. Less sensitive data for us to handle, less to manage for you.
Connect Mave to your tools with authenticated API requests. For private videos, use JWT tokens to authorize playback in the Mave player or your own integration.
Use a read-only API key when an integration only needs to retrieve information. Use a read-write key when it needs to create, update or delete videos and collections.
Requests without valid credentials are rejected. Keep your keys on your server and give each integration the access it needs.
Explore API authentication →Make a video private, then have your application issue a JWT for a video, collection or space using a read-only API key on your server.
Your application decides who may watch. The token’s scope and expiry determine which videos it can access and for how long. Secure video playback is available from Pro.
Signed URLs and JWTs →Hotlink protection separately configures allowed website domains through CORS.
Hotlink protection →Knowing who handles your data is part of choosing a video platform. Mave is based in the Netherlands, with European-owned infrastructure for default video delivery on paid subscriptions.
Our provider overview explains the services involved, where they operate and what changes when you choose a different delivery option.
Review our infrastructure and providers →Paid subscriptions use Scaleway for default video content distribution from France.
The Test plan uses a different provider. Optional global distribution can move video assets outside the EU. Review the details to choose the setup that fits your requirements.
Check Mave’s status page for service updates and reported incidents.
View service status →Protecting information means managing risks, keeping responsibilities clear and improving how we work. It also means giving people a clear way to raise concerns.
Mave’s information security management system has achieved ISO 27001 certification, providing an independently assessed framework for this ongoing work.
Read about our certification →If you discover a potential vulnerability, our responsible disclosure policy explains how to report it confidentially, what to include and what to expect from us.
Send security findings to cert@mave.io. Please follow the policy when investigating and sharing a report.
Read our responsible disclosure policy →See how Mave brings these principles into your video workflow.
