Links
About
3Play Media offers premium closed captioning, live auto-captioning, audio description, transcription, and subtitling solutions at competitive prices. We provide a user-friendly account system, fast turnaround, flexible APIs, and integrations with a multitude of video players, platforms, and lecture capture systems.
Accessibility
We believe that accessibility matters and that the impact of accessibility is universal.
We aim to help create a more accessible web by providing services and resources that support video accessibility across websites, apps, and other digital interfaces.
Integration Instructions
Security
| HECVAT status | HECVAT is available |
| Data encryption |
All data is encrypted at rest, in backups, and in transit using SSL protocols. |
| Countries of data storage | All 3Play Media data resides in the United States in either an AWS (Virginia, Ohio, or Oregon) or an IBM Cloud (Texas) data center. |
| Data storage method |
Online application data is stored in a MySQL database replica set at Amazon Web Services (AWS) data centers. Online transcript data is stored in a MongoDB replica set housed in an IBM Cloud data center in Dallas, Texas. Audio and video data is stored in AWS S3, encrypted at rest with AES-256, under separate authentication credentials. |
| Data retention policy |
Customers may request that we purge any and all video, audio, streaming, and/or transcript data1 from our system at any time after the services have been completed. 3Play also supports periodic purging of this data on a customer specified schedule. We maintain all metadata for customer assets in our MySQL database, as this is required for billing. |
| Incident management program, policy, and testing | When code is updated, it is reviewed for potential vulnerabilities, either in the code itself or its transitive dependencies. We similarly scan Docker images using AWS ECR’s scanner. And we commission an annual penetration test and infrastructure review by experienced third-party security consultants. |
| Security Standards | HIPAA, GDPR, CCPA (pending in 2021), ISO 27K (in progress) |
| Third party testing and security controls practices | 3Play’s infosec controls are regularly reviewed, evaluated, and audited through continuous internal review and internal audits, by participating in the CyberGRX cyber risk management program, commissioning a penetration test (“pentest”) from an experienced third-party provider on an annual basis, and by acquiring and reviewing SOC reports from our leading providers. |
Privacy
| Privacy policy link |
https://www.3playmedia.com/privacy-policy/ |
| COPPA policy link |
N/A |
| Privacy department/officer contact: |
The Senior Director of Human Resources, Amy Dwyer, is the privacy officer for 3Play Media. |
| Personally identifiable or personal data collected | 3Play stores in our database the email addresses entered by users, the mailing address and telephone numbers entered by billing contacts, and the IP addresses of users interacting with our system. These data are required for the fulfillment of our services. All of these data are encrypted at rest, in backups, and in transit using TLS protocols. 3Play does not store credit card information. Any credit card information is forwarded to our payments processor, Braintree. |
| Data Deletion Request Process | You may request, and we will provide you with, information about whether we hold any of your personal information. You may request access to, or correction or deletion of your personal information, by contacting us at privacy@3playmedia.com. We will respond to your request within a reasonable timeframe. |
| Privacy Certifications or Seals |
HIPAA, GDPR, CCPA (pending in 2021), ISO 27K (in progress) |
| Privacy Law Compliance |
Our lawful bases for the processing of personal data are: (i) consent and/or (ii) any other applicable lawful bases, such as our legitimate interest in engaging in commerce, offering products and services of value to the users of the Site, preventing fraud, ensuring information and network security, marketing and complying with industry practices. |
