What a governed content pipeline is
Most content tools store files and hope the rules are followed. A governed pipeline enforces them: isolation between clients, valid rights on every asset, and disclosure on anything AI touched — checked on the path the content actually travels, from capture through final delivery. The interface is a projection of what the system already decided; it cannot show what the rules forbid.
Security is a property of the database, not a paragraph
Isolation, rights, Article 50 disclosure, and approval are enforced at the delivery doors — and when a check cannot resolve, delivery is refused rather than allowed.
Postgres row-level security on every public table. Cross-tenant access is refused at the database, not filtered in the app.
An asset must declare a C2PA source type before it can be approved or delivered. Where that provenance is algorithmic, the database computes that a disclosure is owed and clears it only on an approved record whose declarer and approver are separate entries. Fail-closed: unknown provenance blocks.
Embargo, licence window, expiry, talent conflict and the Article 50 hold are weighed by a single function — the same one that answers the reviewer's screen — so display and enforcement cannot drift apart. The client cannot assert its own compliance.
Running a formal process? Send us the RFP →
Built for a content supply chain, not one company
A brand owns the asset and the approval gate; an agency coordinates the work under a scoped, revocable grant; a studio produces it and keeps its cost and margin private. WorkFreq models Studio, Agency, and Brand as first-class organization types, so governance stays intact across company lines — in one system of record instead of three.
Recorded by the database, not by convention
MFA is required at sign-in for every non-guest role — an application control at the door, not a database policy; ten canonical roles gated in the database; and approvals, stage changes, disclosures and consent written to append-only event planes — written only by privileged database triggers, readable by the tenant and writable by no one, and deliberately built to outlive the rows they describe. White-label guest galleries stay invisible until a named approver releases them. See the compliance model →
Governance first, automation second — never the other way around
Nothing in this pipeline publishes, edits, or delivers content on its own today, and we would rather say so than let a procurement reviewer discover it. Automation is on the roadmap, and it will arrive inside the compliance plane already in production rather than beside it — the same required provenance declaration, the same Article 50 disclosure with its separate declarer and approver, the same one rights verdict at the delivery doors, and the same append-only record. The governance ships first, so adopting any automated capability will be a decision a client makes rather than a default it inherits. Read the compliance detail →
Before you ask
What is a governed content pipeline?
A single system where every asset is captured, composed, reviewed, approved, and delivered under enforced rules — isolation, one rights verdict, and a required provenance declaration — rather than promised in a policy. In WorkFreq those rules live in the database, so the app cannot route around them.
How is this different from a DAM?
A DAM stores and organizes files. WorkFreq governs the pipeline from capture to delivery and enforces isolation, rights, and Article 50 disclosure at the delivery doors — and an asset that has not declared how it was created cannot reach approved or delivered at all. Fail-closed, not fail-open.
Is it ready for enterprise vendor review?
Yes — row-level isolation on every public table, MFA required at sign-in for every non-guest role, one rights verdict shared by the review surfaces and the delivery doors, and append-only event planes tenants can read but not write. MFA is enforced at sign-in, not by a database policy — ask us for the access matrix if that distinction matters to your reviewer.
Do AI agents run over our content?
No — this version ships no agentic capability as a customer-facing feature. It is on the roadmap and will arrive governed by the compliance plane already in production, so adopting it will be a client's decision rather than an inherited default.