About Postxport
The story behind why this exists, and who is building it.
The problem I kept running into
I make my own content and run a small team for Xplained, my own content page. I have led production teams, editors, creators and creatives for most of my career, and I still run a large team at my day job. Keeping production moving on a timeline is the thing I care about most.
What always got to me: there was no single tool built for video project management. It was always a patchwork, workflows borrowed from product teams, a chat app for communication, and Frame.io as the one dedicated tool for timestamped video comments. Frame.io's simplicity was great, but hopping between programs, spreadsheets, Notion, Slack, WhatsApp, Frame.io, ClickUp, email and Zapier just to ship one project had become a real pain.
Why I ended up building it myself
I wanted a proper fix for this badly. I looked at a few products, but they all did half of what I needed, and some were not reliable. I tried stitching together my own workflows and automations, and it worked, but only because I had built it myself. Handing that same setup to someone just starting out did not make sense, it was intimidating, and getting a whole team to adopt it would have been impossible.
The idea for one integrated tool first came to me about two years ago, while I was leading a large team of editors.
What Postxport is today
I needed this so badly for my own workflow that I ended up building it. That is really the whole origin story, not a market gap I spotted, just a problem I was living with every day that nothing out there actually solved. Postxport is what came out of that.
Think of this as an internal tool I use myself that I am now sharing, so we can make it better together and you can get value from it too. Testers who give us good feedback get free access for life.
It already does what Frame.io does, and in fact a few extra and better things. Features like workflow syncing, calendar tracking, voice notes, and media in comments and chat are the ones I personally love. More exciting features are coming soon. Every editor in my own network now runs Postxport from the start, and you can attach files to comments from day one, no enterprise tier required.
Trust and security
The honest version of how your work is handled. If you have a question that is not here, email hi@postxport.com and I will answer it directly.
Is my data encrypted?
Yes in transit. Everything moves over HTTPS with TLS, and HSTS is enforced so browsers refuse to connect any other way. Passwords are stored only as a bcrypt hash, so nobody, including us, can read them.
At rest, your files and database live on our own server behind strict access controls. Encrypted off-site backups are being rolled out as part of launch hardening, and full encryption at rest is on the near-term roadmap below.
Where does my data actually live?
On our own dedicated server, not spread across a stack of third parties. It is a single-tenant setup, not a shared multi-tenant cloud, which means fewer places your media can leak from.
We keep the number of outside services that ever touch your data deliberately small: email delivery, optional Google sign-in, transcription when you request captions, and optional WhatsApp notifications. Product analytics run only if you accept the cookie banner. Each one gets only the minimum it needs, and the full list lives in our privacy policy.
Who can see my videos, comments, and rates?
Access is enforced on the server for every single request, never left to the browser. Roles are real and separated: client reviewers only see work sent for their approval and never see internal team notes, editor identities, or payment rates. Payment rates are visible only to workspace owners and admins.
Every uploaded file is served only after a membership check or a valid share link. Share links respect the expiry and password you set on them.
How are logins and sessions protected?
Sessions are cookie-based and time-limited. Signing in with a wrong password too many times triggers a lockout, and resetting your password immediately ends every active session. Public forms are protected against bots, and sensitive actions are rate-limited.
What about the quick calls and voice notes?
Live chat audio and video are peer-to-peer between participants' browsers. They are never stored on or routed through our servers. Only short-lived connection metadata (who joined which room) touches the server, and it expires within minutes.
Do you sell my data or track me across the web?
No. We use no advertising or cross-site tracking pixels, and we never sell your data. Because of that, we do not sell or share your personal information under California or other US state privacy laws either.
What are you still working on?
This is an early-stage product and I would rather tell you the roadmap than pretend it is finished. Next up: edge-level DDoS and bot protection in front of the app, full encryption at rest, and regional data residency for teams that need their data to stay in a specific country. Keep truly business-critical originals backed up elsewhere in the meantime.
Who is behind it
Postxport is built by Shashank Pandey, under Xplained.
Want in? Become a tester or see what is free right now.