How My Casting Suite protects your workspace

Infrastructure and transmission

My Casting Suite runs on Cloudflare Workers with D1 database storage and private R2 object storage. Connections to the service are protected with HTTPS encryption in transit.

Access controls

Team members use individual accounts. Workspace roles and application access controls limit which administrative tools, applications, applicant records, and private media a user can access.

Authentication and sessions

Passwords are stored as salted hashes rather than readable passwords. Authenticated sessions are maintained server-side and expire according to the workspace session policy.

Activity records and recovery

Administrative and applicant workflow events are recorded in an audit log. Automated D1 database exports run nightly and are stored in a separate private backup bucket with a configured 90-day retention period.

Payments and email

Stripe processes subscription payments, so My Casting Suite does not store full payment card details. Transactional messages are sent through our configured email provider.

Data control

Customers retain ownership of their data and can export workspace records. Confirmed workspace deletion removes organization records from the active database and organization media from active object storage. Backup retention is described in our Privacy Policy.

Security questions

Report a suspected vulnerability or ask about our controls through the security contact form. Please do not include applicant data, passwords, or other sensitive information in the initial report.

Current assurance status

We do not currently claim SOC 2, ISO 27001, or another independent security certification. This page describes controls that are currently implemented in the product.