Content and security

Every company asks two questions: can we control what gets made, and what happens to our data? This lesson sets up the three content controls in the Starforge Games organization, IP Detection, Quality Gate and Watermark, then shows where your security team finds Scenario's security information, and how to get back something deleted by mistake.

Before you start

• You need to be an organization Admin to change these settings. Other members see the pages without the controls.
• All three content controls are Enterprise features. Each one lives under Settings › Organization, with a project version under Settings › Project.
• Turn on only the ones your policy needs. Each tool has one job:

• Checks cost compute units. The Estimated cost row at the top of the IP Detection and Quality Gate pages shows what each check costs, in CU, for your current settings.

Step 1: Choose what IP Detection looks for

IP Detection checks every job before it runs: it reads the prompt and the input images. Open Organization › IP Detection and expand Filters ("Choose which IP categories to check, and add your own").

Under Built-in filters, turn on what to look for. All four start off:

Under Custom filters, click Add filter to add up to six filters of your own (the counter shows 0/6 custom filters). Give each a name your team will recognize and a plain-language description of what to flag and what not to flag; it can also draft the description from reference images in your library. Run IP Detection, at the bottom, checks images you pick from your library against these filters.

Step 2: Turn on enforcement

The filters only run once enforcement is on: until then, a yellow banner says "Filters won't run while enforcement is Disabled." Expand Enforcement ("Choose what happens when a job is flagged") and switch it on.

From then on, every job is checked before it runs, and a match blocks the job. A blocked job fails at once with a message about potential IP risk; nothing is generated. The filters apply to the whole organization, in the web app and through the API.

Step 3: Turn the check off for one project, if you need to

A project can only turn the check off, for licensed work for example. Open Project › IP Detection and expand Run in this project: until you change it, it shows Inherited with the organization's setting. A project can't pick its own filters or make the check stricter, and only an organization admin can change it.

Step 4: Write a brand brief for Quality Gate

Quality Gate scores each image out of 100, for AI defects and against your brand brief. Open Organization › Quality Gate ("Detect AI slop and check generations against your brand brief"). It has two sections: Run automatically and Brand brief.

Expand Brand brief and click Create Brief. A brief is:

• A description of what an on-brand image looks like: palette, lighting, rendering style, subject rules, and what should never appear.
• Reference images, up to 10, that show the style to match.

Without a brief, Quality Gate still runs, but it scores AI quality only. A project can add its own brief under Project › Quality Gate, which refines the organization's.

Step 5: Score every new image

Expand Run automatically and turn on Auto-detect on generation to check every new image generated in your organization. You can also run it on demand on a few images first, to see how your brief behaves.

Quality Gate never blocks anything. Each image gets Pass, Review or Fail; Review means a person should take a look.

Step 6: Read a score

A scored image shows its result in the Info panel, under Quality Gate: here, 76 out of 100, a Pass. Below are the scores per dimension, the Reasons, and Suggestions to fix them.

Sensitivity, set per brief, moves the lines between Pass, Review and Fail without changing the scores:

Step 7: Set a watermark

Watermark puts your text or logo on every image and video your team generates, whenever it's viewed or downloaded. Open Organization › Watermark and expand Organization watermark:

The Preview updates as you go. Turn on Apply to every generation and save.

Uploads aren't marked, but anything generated from them is. Your originals stay intact, so turning the watermark off serves images clean again. A project can set its own under Project › Watermark, which replaces the organization's for that project.

Step 8: Send your security team to the Trust Center

When your security team asks, send them to Scenario's Trust Center, at trust.scenario.com. Scenario holds a SOC 2 Type 2 report.

• Overview shows the compliance report and a summary of the controls.
• Controls lists the controls in place, from access control and encryption to monitoring, grouped by area (Human Resources, Asset Management, Access Control, Cryptography, Monitoring, Cloud Security and more).
• Subprocessors lists every subprocessor, what it does, and where. The main infrastructure runs on AWS, in the United States.
• Documents holds the SOC 2 report. Request it right there, from a business email address.

Step 9: Restore what was deleted by mistake

If someone deletes something by mistake, it stays in the trash for 30 days, and you can restore it. Open Assets and click the trash icon, the last of the type filters under the title. Each item shows how many days it has left. After 30 days it's removed for good. Deleting a whole project skips the trash: it removes everything in the project at once.

Common problems

What's next

Your team's work is now checked, scored and marked. Next, the last lesson, Share and roll out: working as a team, from sharing workflows to guiding the Agent.