Video encoding · packaging and DRM included
From a master to every quality, encrypted and ready
Upload the master once. We produce the quality ladder, package it for adaptive streaming and encrypt it with your own keys — in one call, straight into your storage.
Why it is wired to the rest
Encoding in one place, storing in another and encrypting in a third means moving the video twice and paying for the transfer both times. Here the encoder writes straight into your storage and asks your own KMS for the keys: the file does not travel further than it must, and there is nothing to wire up.
Upload the master once
A file already in your storage is the source. We hand it to the encoder with a temporary permission: it is never made public.
Pick qualities and format
Choose the qualities and whether you want HLS, DASH or both. Each format is a pass of the ladder, and we quote the price before you commit.
It comes out encrypted and servable
With DRM on, the package carries the licence URL inside the manifest. The outputs appear in your storage with a signed URL.
Our own encryption
What happens when we do the encrypting
Packaging encrypted video has a convenient path and a correct one. The convenient one ships two separate packages and an HLS that only opens on Apple. We took the other one, which is why an encrypted job here comes out unlike what comes out anywhere else.
One set of segments for both HLS and DASH
The usual approach packages twice: one folder for HLS, another for DASH, the same frames duplicated in both. You pay for that storage every month and for that transfer on every view. Here both manifests point at the same segments — half the stored bytes, for the same catalogue.
Widevine, PlayReady and FairPlay over the same file
One key and one pass cover all three systems, and each manifest ships with its licence URL already inside. There is no Apple version and another for everyone else: there is one package that opens everywhere.
Encrypted HLS in fMP4, not TS
This is the difference that decides all of the above. Encrypted HLS in TS can only carry FairPlay, which shuts out every client that speaks HLS and is not Apple: smart TVs, hls.js, ExoPlayer in HLS mode. fMP4 has room for all three, and that is what we deliver.
cbcs across both formats at once
Apple requires cbcs. Much of the DASH world grew up on cenc. Encrypting once in cbcs and having it serve both is what lets the segment set be one instead of two.
A key per quality, and a separate one for HD
Every rung of the ladder carries its own key, so a leaked one does not open the rest. High qualities can also require a second key bound to hardware decoding: 480p still plays where there is none, and 1080p does not.
The audio is encrypted too
That is not the norm: protecting the video and leaving the soundtrack in the clear is common, because encrypting it complicates the packaging. Here the audio track ships with the same protection as the picture. If your content is a concert, a podcast or a lesson, that is not a detail — it is the content.
One audio track for the whole ladder
Audio is not duplicated inside each quality. It ships once, separately, and all five video qualities share it — the player drops from 1080p to 480p without touching the sound. Fewer stored bytes, and a quality switch with no audible seam.
Subtitles in several languages, in both formats
Hand over your subtitle files alongside the video and they come out declared in the HLS manifest and the DASH one at once, each with its language. The player offers them in its menu with nothing for you to configure.
Verified before publishing, or not published
Before a package reaches your storage the bytes are checked: that the encryption box carries the right key id in every quality, that the encrypted playlists declare their key, and that the DRM header is well formed. If anything is off the job fails and nothing is published. A visible failure beats a video that looks protected and is not.
Pricing
Per minute of output, per quality. Ten minutes at 1080p and 720p is twenty output minutes, not ten — and each deliverable format is another pass.
| Quality | H.264 | HEVC |
|---|---|---|
| 240p — 480p | $0.0065 | $0.013 |
| 720p, 1080p | $0.013 | $0.026 |
| 1440p | $0.0325 | $0.065 |
| 4K | $0.0585 | $0.117 |
| Audio (per output) | $0.0013 | $0.0013 |
Nothing is upscaled: asking for 1080p from a 720p master produces 720p, and you are billed for the 720p you get. The quote is a ceiling; the charge is settled against what was actually produced. A job that fails costs you nothing.
API
One call, not a pipeline
Encode, package and encrypt in the same request, against the storage and the keys that are already yours. No moving the file between providers and paying for the transfer twice.
DocsPOST /v1/encoding/jobs { "sourceFileId": "a1b2c3d4-...", "heights": [1080, 720, 480], "durationSeconds": 600, "package": "hls+dash", "drm": true } # the outputs land in your storage already encrypted, # licence URL inside the manifest
Get started
No monthly fee, no commitment. Top up and it draws down as you use it.