ICU Mark, Serve and Trace

Three layers. Adopt them in order, or take the whole stack.

01

ICU Mark — prepare the title

What it does

Takes your master and produces the marked mosaic of the title, verified piece by piece, with the title number carried in the mark.

How you get it

On your machine. A desktop encoder for your render box. Drop a master in a folder; it renders the marked title, verifies it, and uploads straight to storage. Survives power cuts and resumes.

Managed. Send us the masters; we run the same encoder and return the marked title into your storage.

What you need

A master file (ProRes, DNxHR, high-bitrate H.264 or similar). Keep burning in your own logo if you do; the mark is independent of it.

Output

The marked title ready to serve, with its index sidecars and a record file for your archive. Sprites, trailer and poster are produced in the same pass if you want them.

02

ICU Serve — deliver each viewer their own copy

What it does

Serves HLS streams and progressive downloads assembled for the viewer, from an edge network, with the per-viewer combination in both.

How it plugs in
1

You point a hostname (e.g. cdn.yourbrand.com) at ICU.

2

Your backend mints a playback token for a signed-in member (one line of code; we provide the function in your language).

3

Your player loads:

https://cdn.yourbrand.com/v/<title>/index.m3u8?token=…

Download button: same host,

/dl/<title>.mp4?token=…
What stays yours

Members, checkout, billing, player, branding, storage account if you want it in your own name.

Where it runs

Cloudflare's edge network, 300+ cities, so the first byte comes from the data centre nearest the viewer. No origin server of ours to go down; storage and delivery live on the same network.

Included

Byte-range downloads, clip excerpts with a minimum length, stream tokens with expiry, per-title and per-account access logs you can export, cache at the edge so repeated plays do not hit storage.

03

ICU Trace — read a leak back to the account

What it does

Given a leaked clip, identifies the title and the account that received that combination, and reports the odds of a false match.

Workflow
1

Upload the clip, or the combination already read from it.

2

Trace recovers the title from the mark and searches the candidate accounts (everyone who ever received that title, or a narrower list you choose).

3

You get the account id, the position in the title where the clip starts, how much of the combination matched, and the expected false-match count.

4

Export an evidence sheet (PDF) for the takedown, the processor or counsel: title, account id, stream date and time, position and length of the matched run, expected false matches, and the account's purchase reference for that title as recorded in your system.

Who runs it

Your staff, from a web dashboard. ICU analysts on request for difficult captures (low light, heavy compression, long re-encode chains) —

EVIDENCE SHEET · ICU TRACE
Title0412Account id18 231Stream date and time—Position of matched run—Length of matched run2 m 10 sExpected false matches0.0002Purchase reference—
MATCHED RUN
icu.ltdpage 1 / 1
WHAT TRACE EXPORTS · SAMPLE
04

What a leak costs you with and without ICU

WithoutWith ICU
Copy appears on a tube site
Takedown notice, copy returns from another account next week
Takedown notice with account evidence, account closed
Performer asks where it came from
“We don’t know”
Title, account, date of the stream
Processor asks what controls you have
Takedown log
Takedown log plus attribution record
Repeat leaker
Invisible
Identified on the first clip
Evidence for counsel
An IP address from a torrent swarm; the subscriber may not be the sharer
The account that streamed the title and the transaction that paid for it
05

Integration timeline (typical)

StepWhoTime
Encode the catalogue
Your render box or ours
Depends on size; one 4K feature per few hours per machine
Point hostname, mint tokens
Your developer
One day
Switch the player URL
Your developer
One hour
First Trace run on a test leak
Your staff with us
Thirty minutes
06Roadmap
ROADMAP

Self-serve dashboard with API keys.

ROADMAP

Multi-bitrate ladders.

ROADMAP

Automated reading of the combination from an uploaded file.

ROADMAP

Takedown partner hand-off: the attribution record goes straight into the notice.