---
title: Content and security
display: '*Content* and security'
nav_title: Content and security
summary:
  - "Turn on IP Detection, Quality Gate and Watermark for the organization, and see what a project can change."
  - "Read a Quality Gate score: out of 100, with Pass, Review or Fail, reasons and fixes."
  - "Send your security team to the Trust Center, and restore deleted assets from the trash."
description: What you own, where data goes, and the controls that watermark, check and gate what your team generates.
section: teams
order: 5
type: tutorial
level: Scale
roles: [admin]
time: { read: 2 }
models_checked: []
last_verified: 2026-11-11
# a lesson that points to its articles: their PDFs, not one of this page
pdf: false
video_caption: Content and security
film_first: true
about: "Control what gets made and answer your security team: IP Detection blocks a job before it runs, Quality Gate scores each image, Watermark marks what your team generates, and the Trust Center lists the SOC 2 report, controls and subprocessors. Deleted assets stay in the trash for 30 days. The models and settings in this lesson are as of November 2026."
chapters:
  - { at: 0, title: "In this lesson", image: "/media/images/teams/content-and-security/ch-01-in-this-lesson.webp" }
  - { at: 14.2, title: "Content controls", image: "/media/images/teams/content-and-security/ch-02-content-controls.webp" }
  - { at: 77.1, title: "Security", image: "/media/images/teams/content-and-security/ch-03-security.webp" }
articles: [content-and-security]
related: []
thumb: teams/content-and-security/thumb.webp
video: tutorials/content-and-security.mp4
steps:
  - title: "Choose what IP Detection looks for"
    text: "Organization › IP Detection › Filters: turn on the Built-in filters you need (Fictional characters, Brands & trademarks, Celebrity likeness, Artist styles). Under Custom filters, Add filter for up to six of your own, each with a name and a plain-language description."
  - title: "Turn on enforcement"
    text: "Expand Enforcement and switch it on: until then, the filters don't run. From then on a match blocks the job before it runs, in the web app and through the API."
  - title: "Turn the check off for one project"
    text: "For licensed work, Project › IP Detection › Run in this project, which shows Inherited until you change it. A project can only turn the check off, never pick its own filters."
  - title: "Write a brand brief for Quality Gate"
    text: "Organization › Quality Gate › Brand brief › Create Brief: a description of an on-brand image (palette, lighting, rendering style, subject rules, what must never appear) and up to 10 reference images. A project can add its own brief."
  - title: "Score every new image"
    text: "Expand Run automatically and turn on Auto-detect on generation. Quality Gate never blocks: each image gets Pass, Review or Fail."
  - title: "Read a score"
    text: "A scored image shows its result in the Info panel under Quality Gate, out of 100, with Brief compliance, AI quality, Reasons and Suggestions. Sensitivity, set per brief, moves the Pass, Review and Fail lines (Medium: Fail below 50, Pass from 70)."
  - title: "Set a watermark"
    text: "Organization › Watermark › Organization watermark: Text or Upload Logo, Placement (Tiled or a corner or Center), Opacity, Size, Rotation and Spacing, checked in the Preview. Turn on Apply to every generation and save."
  - title: "Send your security team to the Trust Center"
    text: "trust.scenario.com has the Overview, the Controls, the Subprocessors and, under Documents, the SOC 2 Type 2 report to request from a business email address."
  - title: "Restore what was deleted by mistake"
    text: "Open Assets and click the trash icon, the last of the type filters under the title. Each item shows the days it has left; after 30 days it's gone for good."
updated: 2026-11-11
canonical: https://learn.scenario.com/teams/content-and-security
---

Last updated: 2026-11-11

# Content and security

> What you own, where data goes, and the controls that watermark, check and gate what your team generates.

In short:

- Turn on IP Detection, Quality Gate and Watermark for the organization, and see what a project can change.
- Read a Quality Gate score: out of 100, with Pass, Review or Fail, reasons and fixes.
- Send your security team to the Trust Center, and restore deleted assets from the trash.


Every company asks two questions: can we control what gets made, and what happens to our data? This lesson sets up the three content controls in the Starforge Games organization, **IP Detection**, **Quality Gate** and **Watermark**, then shows where your security team finds Scenario's security information, and how to get back something deleted by mistake.

:::note As of November 2026
The models, settings and screens in this article are the ones Scenario offered in November 2026. New models and updates arrive often, so check the app for newer options before you choose.
:::

:::steps Quick version
1. **IP Detection** blocks: turn on the built-in filters you need, add up to six of your own, then turn on **Enforcement**.
2. **Quality Gate** scores: write a **Brand brief**, then turn on **Auto-detect on generation** to score every new image.
3. **Watermark** marks: set your text or logo, its placement, and turn on **Apply to every generation**.
4. Send your security team to Scenario's Trust Center for the SOC 2 report, the controls and the subprocessors.
5. Restore anything deleted by mistake from the trash within 30 days.
:::

## Before you start

- **You need to be an organization Admin** to change these settings. Other members see the pages without the controls.
- **All three content controls are Enterprise features.** Each one lives under **Settings** › **Organization**, with a project version under **Settings** › **Project**.
- **Turn on only the ones your policy needs.** Each tool has one job:

| Tool | Its job | Does it stop a job? | A project can |
|---|---|---|---|
| **IP Detection** | Checks every job for IP risk before it runs | Yes, when enforcement is on | Only turn the check off |
| **Quality Gate** | Scores images for AI defects and brand fit | Never | Add its own brief |
| **Watermark** | Marks every generated image and video | No | Set its own watermark |

- **Checks cost compute units.** The **Estimated cost** row at the top of the IP Detection and Quality Gate pages shows what each check costs, in CU, for your current settings.

## Step 1: Choose what IP Detection looks for

IP Detection checks every job before it runs: it reads the prompt and the input images. Open **Organization** › **IP Detection** and expand **Filters** ("Choose which IP categories to check, and add your own").

Under **Built-in filters**, turn on what to look for. All four start off:

| Built-in filter | What it catches |
|---|---|
| **Fictional characters** | Characters from films, games, comics and books, including their signature look; generic archetypes aren't flagged |
| **Brands & trademarks** | Logos, packaging and product designs owned by a company |
| **Celebrity likeness** | The face or recognizable look of a real public figure, named in the prompt or in an input image |
| **Artist styles** | Imitations of the signature style of a named artist |

Under **Custom filters**, click **Add filter** to add up to six filters of your own (the counter shows **0/6 custom filters**). Give each a name your team will recognize and a plain-language description of what to flag and what not to flag; it can also draft the description from reference images in your library. **Run IP Detection**, at the bottom, checks images you pick from your library against these filters.

![Organization › IP Detection: the warning that filters won't run while enforcement is Disabled, the four built-in filters and Custom filters with Add filter](https://ufgc0c9mhl4ueq76.public.blob.vercel-storage.com/academy/54e1009a3d5a283a39bb79ba44a665e187a28cfbc605c2492f02546578e20ced.webp)

## Step 2: Turn on enforcement

The filters only run once enforcement is on: until then, a yellow banner says "Filters won't run while enforcement is Disabled." Expand **Enforcement** ("Choose what happens when a job is flagged") and switch it on.

From then on, every job is checked before it runs, and a match blocks the job. A blocked job fails at once with a message about potential IP risk; nothing is generated. The filters apply to the whole organization, in the web app and through the API.

![Enforcement expanded, with its switch off and the Filters section below](https://ufgc0c9mhl4ueq76.public.blob.vercel-storage.com/academy/d759c7ec275aa2b49563bf7702583772cd5c714b9a976e28eeca94ce571fc4fa.webp)

## Step 3: Turn the check off for one project, if you need to

A project can only turn the check off, for licensed work for example. Open **Project** › **IP Detection** and expand **Run in this project**: until you change it, it shows **Inherited** with the organization's setting. A project can't pick its own filters or make the check stricter, and only an organization admin can change it.

![Project › IP Detection for Tour Demo: filters are organization-wide, and Run in this project is Inherited](https://ufgc0c9mhl4ueq76.public.blob.vercel-storage.com/academy/46022fe4282adf3a4633830159c278feadff125fbe582c7346f2d4b4ec028e46.webp)

## Step 4: Write a brand brief for Quality Gate

Quality Gate scores each image out of 100, for AI defects and against your brand brief. Open **Organization** › **Quality Gate** ("Detect AI slop and check generations against your brand brief"). It has two sections: **Run automatically** and **Brand brief**.

![Organization › Quality Gate with Estimated cost, Run automatically (Disabled) and Brand brief (Not configured)](https://ufgc0c9mhl4ueq76.public.blob.vercel-storage.com/academy/64d8ee4d7902aec7711ec54f9c98346b69c11ffd9ed8965ce345dd4a159da087.webp)

Expand **Brand brief** and click **Create Brief**. A brief is:

- **A description** of what an on-brand image looks like: palette, lighting, rendering style, subject rules, and what should never appear.
- **Reference images**, up to 10, that show the style to match.

Without a brief, Quality Gate still runs, but it scores AI quality only. A project can add its own brief under **Project** › **Quality Gate**, which refines the organization's.

![Brand brief expanded: No brand brief configured, Reference images (0/10) and Create Brief](https://ufgc0c9mhl4ueq76.public.blob.vercel-storage.com/academy/044957d92658fe8a609072518d3094d1330317f89d032aa696f86a87f0166730.webp)

## Step 5: Score every new image

Expand **Run automatically** and turn on **Auto-detect on generation** to check every new image generated in your organization. You can also run it on demand on a few images first, to see how your brief behaves.

Quality Gate never blocks anything. Each image gets **Pass**, **Review** or **Fail**; **Review** means a person should take a look.

![Run automatically expanded with the Auto-detect on generation switch](https://ufgc0c9mhl4ueq76.public.blob.vercel-storage.com/academy/664f0d7c72c1e97ada038054d62709d65b05787bcfce39a4ead0bc77de718e78.webp)

## Step 6: Read a score

A scored image shows its result in the **Info** panel, under **Quality Gate**: here, 76 out of 100, a **Pass**. Below are the scores per dimension, the **Reasons**, and **Suggestions** to fix them.

| Dimension | What it measures |
|---|---|
| **Brief compliance** | How closely the image follows your brief and reference images; scored only when a brief applies |
| **AI quality** | Freedom from the usual giveaways: broken hands, garbled text, waxy skin, melted or duplicated detail, incoherent backgrounds |

**Sensitivity**, set per brief, moves the lines between Pass, Review and Fail without changing the scores:

| Sensitivity | Fail | Review | Pass |
|---|---|---|---|
| Low | Below 40 | 40 to 59 | 60 and above |
| Medium (default) | Below 50 | 50 to 69 | 70 and above |
| High | Below 60 | 60 to 79 | 80 and above |

![The Info panel of a scored image: 76/100, Pass, AI quality, with the reasons and suggestions](https://ufgc0c9mhl4ueq76.public.blob.vercel-storage.com/academy/e1506d01c48cee62b021fd684e2839508c407dd0be6adb3a4ae6ded7f96167ed.webp)

## Step 7: Set a watermark

Watermark puts your text or logo on every image and video your team generates, whenever it's viewed or downloaded. Open **Organization** › **Watermark** and expand **Organization watermark**:

| Setting | What it does |
|---|---|
| **Text** | The words to stamp, for example your studio name or "CONFIDENTIAL" |
| **Upload Logo** | A PNG, JPEG or WebP logo, used instead of the text; use one with a transparent background |
| **Placement** | **Tiled** repeats the mark; **Center**, **Top Left**, **Top Right**, **Bottom Left** and **Bottom Right** draw it once |
| **Opacity**, **Size**, **Rotation** | How strong, how wide (as a share of the image) and how tilted the mark is |
| **Spacing** | For **Tiled** only: the gap between repetitions |

The **Preview** updates as you go. Turn on **Apply to every generation** and save.

Uploads aren't marked, but anything generated from them is. Your originals stay intact, so turning the watermark off serves images clean again. A project can set its own under **Project** › **Watermark**, which replaces the organization's for that project.

![Organization › Watermark: Apply to every generation, the text, Upload Logo, Placement on Bottom Left, and Opacity, Size and Rotation](https://ufgc0c9mhl4ueq76.public.blob.vercel-storage.com/academy/197507c2942c3033fb6ec12c940cd0989db755788208db6652d722c38da0c689.webp)

## Step 8: Send your security team to the Trust Center

When your security team asks, send them to Scenario's Trust Center, at trust.scenario.com. Scenario holds a SOC 2 Type 2 report.

- **Overview** shows the compliance report and a summary of the controls.
- **Controls** lists the controls in place, from access control and encryption to monitoring, grouped by area (**Human Resources**, **Asset Management**, **Access Control**, **Cryptography**, **Monitoring**, **Cloud Security** and more).
- **Subprocessors** lists every subprocessor, what it does, and where. The main infrastructure runs on AWS, in the United States.
- **Documents** holds the SOC 2 report. Request it right there, from a business email address.

![The Trust Center Overview: Compliance with the SOC 2 type 2 report, and Controls by area](https://ufgc0c9mhl4ueq76.public.blob.vercel-storage.com/academy/3d31a96aa7e7431fc6547a8d79b4427f3ef3a3c24b3abd216bde735955f13fd2.webp)

![The Controls tab: areas on the left and each control with its description](https://ufgc0c9mhl4ueq76.public.blob.vercel-storage.com/academy/219f2b1a70e1d4e3dae2ee182607d393f88d61b58ee3494b96087172ab197eb7.webp)

![The Documents tab with the SOC 2 Type 2 report and the button to request it](https://ufgc0c9mhl4ueq76.public.blob.vercel-storage.com/academy/165e67fc65617579562eac725e4335b943ade71cc2685573d706ea1556e8ef31.webp)

## Step 9: Restore what was deleted by mistake

If someone deletes something by mistake, it stays in the trash for 30 days, and you can restore it. Open **Assets** and click the trash icon, the last of the type filters under the title. Each item shows how many days it has left. After 30 days it's removed for good. Deleting a whole project skips the trash: it removes everything in the project at once.

![The Asset Hub with the trash filter selected: deleted items are kept for 30 days, then permanently removed](https://ufgc0c9mhl4ueq76.public.blob.vercel-storage.com/academy/663a8c97d969a76268ca893210a8daeb7c8d5feb9f5ec239ebbd2f43ca23cb6d.webp)

## Common problems

| What you see | What to do |
|---|---|
| IP Detection blocks nothing | Turn on **Enforcement**, and at least one built-in or custom filter |
| A licensed project keeps getting blocked | Turn the check off for that project under **Project** › **IP Detection** › **Run in this project** |
| A custom filter flags too much | Edit its description to say what should not be flagged; the change applies on the next job |
| Quality Gate scores ignore your brand | Write a **Brand brief** with reference images |
| Too many images land on **Review** | Lower the brief's sensitivity, or improve the brief |
| A client project needs another mark | Set a project watermark under **Project** › **Watermark** |
| Someone deleted assets by mistake | Restore them from the trash within 30 days |

## What's next

Your team's work is now checked, scored and marked. Next, the last lesson, [Share and roll out](https://learn.scenario.com/teams/share-and-roll-out.md): working as a team, from sharing workflows to guiding the Agent.

Source: https://learn.scenario.com/teams/content-and-security