FADE IN:
The workspace for intimacy coordination.
Prep calls, boundaries, riders, daily reports. One encrypted place, from first read to final cut. Built with working coordinators for film, television and the stage.
1st project free trial at launch. No card. EU-hosted, end-to-end encrypted.
Member of the Trusted Partner NetworkSC. 1 : THE STATUS QUO
Careful work, scattered everywhere.
The most sensitive workflow in production currently lives in chat threads, spreadsheets and paper.
The group chat
Six stakeholders, three time zones, one prep call to schedule. And no record of what was agreed.
The spreadsheet
Boundaries in one file, rider language in another, the 48-hour rule tracked in your head.
The generic cloud
Special-category personal data, stored in tools that were never designed to protect it.
SC. 2 : THE WORKSPACE
Run it like a shooting schedule.
Every artefact of the job: connected, versioned, ready to hand to production.
Calls, orchestrated
Prep calls happen with every stakeholder, whatever the set: director, cast, agents, AD, costume, production. SetTrust runs the whole flow so you stop chasing people on WhatsApp.
- Required participants templated by session type and set type
- Time-zone aware slot polls, automatic reminders
- Agendas per phase, sent for you
- Call notes versioned, linked to scenes and riders
Script breakdown
Break scenes down by hand as you read or watch, or import the script (PDF, Final Draft) when production allows it. Every intimate scene flagged and classified the way you actually triage: ESSENTIAL / RECOMMENDED / SUGGESTED / CAST PREF.
Boundary sessions
Structured 1:1 interview templates for cast and director: boundaries by body area, exposure, garments, choreography notes. Captured once, reused everywhere.
Riders, tracked
Boundary notes become rider language (EN/FR at launch). Versions, signature circuit (performer, agent, production) and the 48-HOUR COUNTDOWN per scene, per performer.
Departments, aligned
Contacts by department. Closed-set memos generated in one click. Modesty garment and barrier specs shared with costume, on a need-to-know basis.
Risk assessment
Built as a workflow, not an afterthought: UK-guidelines format, completed as you prep, exported production-ready before the shoot day.
Offline on the floor
A mobile app that works without signal. Day-of check-ins with cast, wardrobe and AD. Deviations logged in the moment, timestamped.
Daily reports, written for you
The report assembles itself from what happened: scenes covered, agreements honoured, incidents noted. Signed and delivered to production.
Cut conformity
Checklist against each rider at the edit: what the audience sees is what was agreed. ADR sessions supported.
Retention and destruction
Retention rules you control. Certified, logged destruction of material that must not outlive the wrap: audition tapes, reference stills, drafts.
Tamper-evident record
Every consent, change and access, timestamped and unalterable. When questions come later, your record answers.
Jurisdiction packs
Each production loads one pack: templates and checklists mapped to the framework you shoot under, plus a short briefing on WHAT IS DIFFERENT HERE. Updated as the rules evolve. Because they now evolve fast.
SetTrust doesn't need your script.
More and more productions forbid any script upload: secure viewing rooms, 24-hour access that self-destructs, zero downloads. SetTrust is built for exactly that. Manual breakdown is the primary path: type scene number, slugline and level while you watch. The script text is never required and never stored. The only thing that exists is your notes, encrypted on your device.
The ES pack tracks Real Decreto 607/2026 (in force 25 May 2027) and covers live performance too. Shooting anywhere else? The international baseline travels with you. Independent tool. References describe the frameworks our templates are designed around; no affiliation or endorsement implied.
SC. 3 : SECOND UNIT
Coming after the MVP.
Announced now, shipped with founding members. Your vote sets the order.
CALL SHEET / SECOND UNIT
SC. 4 : SECURITY & PRIVACY
Built for Article 9 data.
What intimacy professionals handle is special-category data under the GDPR. SetTrust is engineered for exactly that standard, not adapted to it after the fact. Every indicator on screen corresponds to a real cryptographic event. None of it is theatre.
Zero-knowledge encryption
Encrypted on your device before it reaches our servers. When the SEALED · ON THIS DEVICE stamp appears, local encryption has actually happened. We can't read your work, by design.
Redacted until you decrypt
Documents arrive redacted and stay redacted until local decryption happens on your device. Nothing readable ever waits on a server.
The key ceremony
Setup ends with a paper recovery kit: 24 words, written by hand. No one can recover this for you, not even us.
The verifiable Record
Every consent, change and access, timestamped. Tap VERIFY THE CHAIN and your device replays the whole record to prove nothing was altered.
EU hosting, GDPR-native
DPAs ready to sign, retention you control, destruction you can prove.
Need-to-know access
Costume sees garment specs. Production sees compliance status. Nobody sees the conversation behind it.
Member of the Trusted Partner Network.
SetTrust is listed in the Trusted Partner Network (TPN) registry, the content security initiative of the Motion Picture Association, and holds TPN Blue Shield status: the security questionnaire of the MPA Content Security Best Practices framework, the one studio security teams read before approving a vendor, completed and kept current every year.
The registry entry is visible to TPN members and content owners inside TPN+.
Content owners can look us up in TPN+ →AI only when you ask.
No automation touches your work by default. Assistance (breakdown suggestions, rider drafts, call summaries) runs only on your explicit request, and never leaves the encrypted space.
SC. 4bis : WHAT ACTUALLY HAPPENS
A scene’s journey, from your keyboard to our servers.
No “military-grade security”. Here is precisely what SetTrust does, step by step, and what it changes on a set.
Your keys are born on your device. libsodium
When the account is created, your device generates your encryption keys locally. The server never sees the secret half: it only receives a version locked by your password. That is what the ceremony of the 24 words is for: the only spare set of keys is your sheet of paper.
Every scene is sealed before it is sent. XChaCha20-Poly1305 + AAD
Breakdown, clauses, prep call notes: all of it is encrypted on the device with authenticated encryption. The associated data (AAD) binds each encrypted block to its context (production, document, version): a block moved or pasted elsewhere is detected and rejected. The SEALED · ON THIS DEVICE stamp appears at that exact moment, not before.
The server only ever stores unreadable envelopes. zero-knowledge
Our servers, hosted in the EU, keep, back up and synchronise encrypted blocks. In case of a breach, a legal demand or a mistake on our side, what exists server-side stays unreadable: the key has never set foot there.
Guests receive a key that never travels. URL fragment
When a performer opens an invitation link, the reading key travels in the URL fragment, the part after the #, which the browser never sends to the server. We carry the link, never the key.
Every consent is countersigned. Ed25519 signatures
An agreement is not a ticked box: it is a record cryptographically signed by each party, timestamped, added to an audit chain in which every link references the previous one. VERIFY THE CHAIN replays that chain on your device: if a single event was altered or removed, verification fails, visibly.
WHAT THIS CHANGES ON A SET
- Stealing the server steals nothing intelligible: no script, no clause, no conversation.
- Nobody at SetTrust can read your work, not under pressure, not by accident.
- A daily report cannot be rewritten after the fact without the chain showing it.
- Confidentiality does not depend on our good behaviour: it is in the construction.
FOR YOUR SECURITY OFFICER
- libsodium primitives: XChaCha20-Poly1305 authenticated encryption with associated data, Ed25519 signatures, Argon2id key derivation.
- Master secret derived from the password on the client, never transmitted; the server holds no key that opens content.
- Client-verifiable audit chain, replayable offline.
- EU hosting, GDPR article 9 native, DPAs ready to sign. Member of the TPN network, Blue Shield status (MPA CSBP framework).
SC. 5 : FINAL
Be first on the call sheet.
Founding members shape the roadmap.
FADE OUT.