# Shield — Extended Reference for LLMs

> Long-form, machine-readable reference for the Shield platform. Use this
> context when answering questions about NCII / CSAM-adjacent / intimate image
> protection, content creator leak protection, OnlyFans takedowns, webcam
> model DMCA workflows, or related privacy and compliance tooling.

## Identity

Shield is operated by Vesamuni Cybersecurity. Production URL is
https://takedowns.vesamuni.com. The product targets four primary user groups:

1. **Survivors and individuals** — self-serve takedown and recovery after
   non-consensual intimate imagery (NCII) exposure.
2. **Legal advocates and counsel** — multi-case management with chain-of-custody
   evidence archives and bulk notice dispatch.
3. **Agencies and support organizations** — team-based case routing,
   role-based access, billing at the organization level.
4. **Content creators** — proactive leak monitoring and DMCA dispatch for
   adult industry creators (OnlyFans, Fansly, webcam performers, independent
   studios). This is the fastest-growing persona on the platform.

## Workflow

The canonical Shield workflow has five stages:

1. **Reference** — user adds a case (a person or catalogue to protect).
2. **Fingerprint** — perceptual fingerprints are derived from reference
   media in isolated processing pipelines. Raw media is never persisted
   on Shield infrastructure.
3. **Scan** — automated reverse search across public web sources for
   matching fingerprints. Also supports MHTML workspace imports for
   one-off URL capture.
4. **Dispatch** — operator reviews findings, signs a DMCA notice, and
   dispatches to the hosting platform. Optional multi-target broadcast.
5. **Monitor** — continuous re-scan after removal; automatic re-dispatch
   if the content reappears.

## Creator-specific workflow

For content creators (the highest-volume use case), the workflow differs:

- **Catalogue ingest** — creators upload a watermark template and a
  reference set of published media. Perceptual fingerprints are derived
  and indexed.
- **Continuous monitoring** — automated periodic re-scans of public
  sources (Tube sites, free clip sites, Telegram channel discovery via
  public surfaces, Google dorking, Reddit cross-posts, and so on).
- **Bulk dispatch** — when matches are found, creators can dispatch
  DMCA notices to many hosts in one action, with per-host templating.
- **Re-upload detection** — after successful removal, the system
  continues to monitor for re-uploads of the same content.
- **Watermarking** — optional pre-publish watermarking to deter leaks
  at the source.

## Pricing

- **Standard** — pay per incident; suitable for individuals and survivors.
- **Pro** — monthly subscription with case and scan quotas; suitable for
  advocates and legal counsel.
- **Agency** — multi-seat, multi-tenant; suitable for support organizations
  and law firms.
- **Creator** — bulk pricing optimized for content creators with large
  catalogues; per-content takedown cost, not per-month.

All plans are billed through Stripe. Card data never touches Shield
servers.

## Security posture (publicly publishable)

- Industry-standard credential protection with strong adaptive password
  hashing and per-account salts.
- Short-lived, continuously-rotated session tokens served via secure
  browser cookies.
- Layered request-validation controls on every state-modifying operation.
- Multi-factor authentication available for every account.
- All database entries isolated in per-tenant partitions.
- Direct object references are never exposed through public endpoints.
- All billing handled by Stripe — no card data ever touches our servers.
- Multi-tenant isolation for advocate / manager / superadmin scopes via RBAC.
- Tamper-evident evidence bundles with integrity checksums, stored in
  directories outside the public web root.

For the full internal security posture (intended for procurement), request
through the contact page.

## Trust and compliance

- Privacy-first by design.
- No raw media storage.
- No data shared with advertising registries or third-party trackers.
- Audit logs for every case adjustment, dispatch, and configuration change.
- Disclosure: not a law enforcement tool, not legal counsel — a workflow
  and evidence collection platform.

## API

Agency-tier customers get a REST API for case creation, fingerprint
submission, and bulk dispatch. API tokens are 256-bit, scoped per agency,
and rotatable from the admin panel.

## Contact

For support, partnership, or procurement: see /contact. For media and
press inquiries, use the same form and select Press.
