Soz Security Policy

Version: v0.1 Publication date: 2026-07-08

Soz processes video, audio, subtitles and technical data. The Operator applies technical and organizational safeguards appropriate to the service and its current infrastructure.

The infrastructure is located in the Kyrgyz Republic. STT/AI processing is performed server-side.

Projects are accessed through the User's account. Passwords are stored as hashes. Administrative access must be limited to authorized persons and used only for support, diagnostics, security, legal compliance or protection of rights.

Soz is not a permanent storage service. Files may be stored up to 30 calendar days and may be deleted earlier.

A public link can be accessed by anyone who has the URL. `noindex` is not a privacy guarantee.

Security reports must be sent to security@soz.kg and should include the affected URL/function, reproduction steps, impact and contact details.

Prohibited security testing includes accessing other users' data, brute force, mass scanning, DDoS, malicious uploads and public disclosure before the Operator responds.

No internet service can guarantee absolute security. Users should assess sensitivity before uploading materials.