TPN Certification Los Angeles
If you handle unreleased studio content, your clients may ask for a TPN status before they send you any. We check your setup against the MPA content security best practices, fix the gaps, write the policies and work with the assessor.
What TPN is
One shared security assessment instead of a separate audit for every studio.
The Trusted Partner Network (TPN) is a joint initiative of the Motion Picture Association (MPA) and the Content Delivery & Security Association (CDSA). It gives studios and vendors a common way to assess content security, so a vendor does not repeat a different audit for each client.
If your facility receives, processes, stores or delivers pre-release content for a studio or streamer, expect to be asked about it. Requirements vary by client and by title, so ask the client's vendor security team what they expect from you.
Gold Shield is the status a facility receives after a successful assessment by a third-party assessor, measured against the MPA content security best practices. The status is listed on the TPN platform, where clients can look it up.
Netflix
Vendor security requirements often reference TPN.
Disney+
Confirm which status they expect before you take a project.
Warner Bros.
An assessment may be part of vendor onboarding.
Apple TV+
Post and VFX vendors should check the requirement for each title.
Amazon
Requirements depend on the content and the contract.
Universal
Ask their vendor security team what they expect.
Who gets asked
If you touch studio content, expect the question.
Post-Production Houses
Editorial, color and finishing facilities that receive or output pre-release content.
VFX Studios
Visual effects work on features, series or streaming titles.
Sound Facilities
Mix stages, ADR rooms and sound design shops working on unfinished picture.
Creative Agencies
Marketing shops that receive screeners, rough cuts or unfinished assets from entertainment clients.
Cloud & Storage Vendors
Storage, transfer and cloud vendors in the media supply chain.
NAS & Infrastructure
Facilities building or expanding on-premises storage for high-value content.
The process
From gap assessment to the assessor's visit.
- 01
Gap Assessment
We go through your network, policies and physical setup against the MPA content security best practices. You get a written list of gaps, ranked by priority.
- 02
Remediation Roadmap
A plan for the fixes: network segmentation, access controls and policy documents. Each item has an owner and a place in the order of work.
- 03
Infrastructure & Policy Build
We put the technical controls in place and write the policies and procedures the assessor will read. We can do all of it or work with your IT person.
- 04
Pre-Audit Readiness Review
A practice run against the framework before the assessor arrives, plus a briefing for your staff on interviews and the walkthrough.
- 05
Third-Party Assessment
We schedule with the assessor, answer their document requests with you and help close any findings they raise.
Questions people ask
What is TPN Gold Shield?
Gold Shield is the TPN status a facility receives after a third-party assessment against the MPA content security best practices. It is listed on the TPN platform so clients can check it.
How long does certification take?
It depends on where you start. A facility with segmented networks, access controls and written policies has less to fix than one with none of those. We give you a realistic timeline after the gap assessment, and the assessor's own schedule adds to it.
What does it cost?
Assessor fees are set by the assessor, and the cost of fixes depends on your facility and what the gap assessment finds. We scope our part after the assessment so you can see the work before you commit to it.
What is the difference between Gold Shield and Blue Shield?
Blue Shield is a self-assessment status. Gold Shield involves an assessment by an approved third party. Which one a client expects depends on the client, so ask them early.
What do you need from us to start?
Network diagrams if you have them, a list of who has access to what, and a walkthrough of the facility. If documents are missing, we start from what exists.
Do you work outside Los Angeles?
We are based in Los Angeles. Infrastructure review and policy work can be done remotely, while the physical part of a review needs someone on site.
Talk to us about a TPN assessment.
Tell us what content you handle and who asked for TPN. We will suggest where to start.