# Vestigit technical architecture

Vestigit provides forensic watermarking, detection and source attribution that integrate into enterprise video workflows.

## Reference components
- Content / stream source.
- Embedder (cloud, encoder-integrated or custom).
- Transcoder / packager (existing customer workflow).
- Origin server.
- CDN / edge mixer.
- Token / session mapping service.
- Player (no SDK requirement in server-side workflows).
- Detector (sample analysis and identifier recovery).
- Portal (operations, reports, evidence).
- Enforcement API (token revocation, session block, vendor handoff).

## Supported workflow categories
Live linear, live events, PPV, VOD, catch-up, time-shift, internal screeners.

## Format and protocol coverage
HLS, MPEG-DASH, CMAF, multi-DRM environments. Final compatibility depends on encoder, packager, origin, CDN, DRM, token and entitlement workflows.

## Performance and QoE
Designed to be invisible. Low-latency integration target. Final latency depends on architecture.

## Security and privacy
Pseudonymous identifiers. Hashed identifiers where required. Role-based access. Audit logs. Data residency discovery during scoping.

## Integration paths
- Cloud embedder.
- Embedder with integrated encoder.
- Custom encoder / packager integration.
- Quick CDN adjustments.
- Custom CDN integration.