Security described plainly — no overclaiming.
MyPass DRM reduces unauthorized access and redistribution and makes a leak traceable to a person. This page separates what the system does, what you configure, and what no DRM can honestly promise.
1 · Technical safeguards
Documents are stored encrypted with AES-256-GCM and delivered over TLS 1.3 through a controlled viewer rather than raw file transfer. Access is evaluated against policy every time content is opened, and each organization's data is logically separated. Further detail is shared with your security team under review.
2 · Policy controls you configure
You define the access policy. Recipient watermarking, access expiry, device limits, print & copy rules, offline-access windows and access records ship on every plan; group-based authorization is available on request.
3 · Infrastructure responsibilities
Kprise operates the service and its underlying infrastructure. Detailed architecture is provided under appropriate review when applicable to a deployment.
4 · Your responsibilities
You control who is entitled to content, keep your identity and entitlement data accurate, and set policies appropriate to your content and audience.
From your source to controlled delivery.
-
1
Your source
- MyPass DRM workspace upload
- REST API from your platform
- MyPass LMS connection
-
2
MyPass DRM protection
- Stored encrypted with AES-256-GCM
- Policy attached to the document
- Watermarked to the reader
-
3
Controlled delivery
- Protected viewer over TLS 1.3
- Device-bound activation
- Every open recorded
Policy is re-evaluated at every open — revoking access needs no new file. See how it works.
5 · The limits of DRM
No DRM system stops every photograph, screen recording, credential-sharing event, or determined extraction attempt. MyPass DRM reduces unauthorized access and redistribution, applies policy controls, and makes misuse traceable to a person. We describe it that way on purpose.
What we don't claim.
MyPass DRM does not claim specific security or compliance certifications on this website. Kprise or its infrastructure providers may hold certifications, but those are not transferred to the DRM service unless their scope explicitly includes it. Any certification claim will be added only after confirmation, naming the standard and its scope.
Responsible disclosure.
Report a suspected security issue by email. Please allow time for triage and coordinated resolution.
Contact: security@kprise.com
Customer security documentation is available under appropriate review for active evaluations and deployments.
Straight answers on how it protects content.
Access is evaluated against your policy every time content is opened, content is delivered through a controlled viewer rather than a raw file, each organization's data is separated, and every open is recorded.
No security tool is absolute, and we do not claim otherwise. MyPass DRM reduces unauthorized access and redistribution and makes misuse traceable to a person; it does not stop every screenshot or a determined extraction attempt.
We do not claim specific security or compliance certifications on this website. Any certification is added only after it is confirmed, naming the standard and its scope.
Each organization's content and access data are logically separated. Detailed architecture is shared with your security team under appropriate review.
Email the security contact listed on this page. We follow responsible-disclosure practices and coordinate resolution.
Yes. Customer security documentation is available under appropriate review for active evaluations and deployments.
Test the security model yourself.
Create a free account and try the controls on your own content. For security documentation during an evaluation, use the contact on this page.