Live broadcast infrastructure

Stats desk to talent monitor in under a second.

Your stats person types. Your talent reads it. Your producer cues it. From the truck, the booth, or the couch — real-time notes for live broadcasts, built for the people running them.

Start your 2-week free trial See how it works ↓
Encrypted end-to-end with TLS 1.3 · Tenant-isolated · SSO-ready
<1sEnd-to-end latency
99.99%Enterprise uptime
∞Talent monitors
SSOOkta · Azure · SAML
How it works

Three screens, one pipeline, zero fumbling.

The tool is intentionally boring in the moment: you type, you hit send, the note appears where it needs to appear. Every second of latency is a second your talent is waiting for a stat they could be reading on-air.

Step 1

Stats desk types

Any browser, any laptop. Truck, broadcast booth, hotel room, or home couch. One person, one keyboard, one tab.

Step 2

Encrypted delivery

Every hop is TLS 1.3 — browser to CDN to server to database. No VPN required, no venue hardware, no broadcast-network reconfiguration.

Step 3

Every monitor updates

Talent monitors and control-room wall screens show the same thing at the same time. Auto-scales to any resolution.

Product

What the stats desk sends. What the talent sees.

Side-by-side so you know exactly what the broadcast looks like from either end of the pipeline. Same note, same instant, different room.

Stats desk · acme.statnotes.app
https://acme.statnotes.app/input
Stat Notes
InputShortcutsHistory
CD ▾
B I U ● Color 62 · 2 lines
Curry now 3rd all-time in 3PM
3,748 career threes — passed Reggie tonight
Send note
Clear
Shortcuts
F1Lineup
F2Timeout
F3Injury
Talent monitor · what the anchor reads
JORDAN
28 PTS Career-high tied · 3rd quarter
Full-screen, auto-scaled to fit, high-contrast for monitor glare.

Key-to-screen latency: under 1 second. No delay, no manual refresh, no "can you read me back that stat?"

Features

Built for the people who run live broadcasts.

Live preview

See exactly what talent will see before you send. Readability check built in — no "is that too small" guessing.

Hotkeys & shortcuts

F1–F12, Ctrl+N, Alt+N. Pre-save your common notes, fire them with one key, edit inline when needed.

Remote-ready & encrypted

Works from the truck, the booth, or the couch. TLS 1.3 on every hop — no VPN needed because the connection is already end-to-end encrypted.

Enterprise SSO

Okta, Microsoft Entra, Google Workspace, generic SAML. Your stats team logs in with your corporate IdP.

Display tokens

Every talent monitor and TOC screen gets its own revocable token. Optional per-token IP allowlist for locked venues.

Full audit log

Every note, every login, every admin change — timestamped and attributed. Because live broadcast operations need receipts.

Capabilities

Everything you can tune — and everything you can't break.

A non-exhaustive tour of what's configurable per tenant. Every setting is reversible and none of it requires engineering support.

Output appearance

How the note shows up on the monitor

  • Font family — system fonts or any custom family you configure per tenant
  • Font color — full hex picker; per-note color overrides supported
  • Background color — matte any studio backdrop or go pure black for off-camera monitors
  • Auto-scale text — text fills the bounding box regardless of length; long notes shrink, short ones enlarge
  • Bounding box — precise x/y/width/height in percent, so the note sits exactly where production wants it
  • 16:9 preview — tenant admins see the bounding box rendered live as they tune it
Input workflow

How the stats desk composes and sends

  • Rich-text editor — bold, italic, underline, inline color
  • Paste cleanup — drop in text from Word, Google Docs, Notes — styles get stripped, structure survives
  • Live "about to send" preview — pixel-accurate render before you commit
  • "On air" mirror — see exactly what the talent is reading right now, alongside what you're about to send
  • Unlimited shortcuts — pre-save common notes, bind them to F1–F12 Ctrl+0–9 Alt+0–9
  • Chip drawer — browse saved shortcuts by name, click or keystroke
  • Two-click Clear — first click arms the button, second fires — no accidental wipes mid-broadcast
  • Ctrl+Enter to send — hands never leave the keyboard during a tight break
  • Character and line counts — know at a glance whether the note will fit
Users & access

Who can do what

  • Three built-in roles — Admin (settings + users), Stat User (send notes), Viewer (read-only history)
  • Per-tenant user directory — create users by hand, or wire up SSO and provision on first login
  • Password or SSO — run either, both, or SSO-only with password fallback disabled
  • Session security — host-scoped cookies, HttpOnly, Secure, SameSite=Lax
  • CSRF protection — per-session tokens on every state-changing request
  • Full audit trail — login, logout, role change, user create/delete — timestamped and attributed
  • History search — every note ever sent, filterable by text and sender
  • Resend from history — push a prior note back on-air with one click
Display access control

Who can view the output

  • Output visibility mode — per tenant: public (URL only) or token required (default)
  • Unlimited display tokens — one per monitor, each with a human-readable name
  • Instant revocation — kill one token without disturbing the others
  • Per-token IP allowlist — bind a display to your truck's public IP, a venue range, or leave open
  • CIDR support — IPv4 and IPv6, multiple ranges per token
  • Last-used timestamps — know at a glance which monitors are actually checking in
  • Session-free output — no cookie, no login — stream decks and venue PCs stay connected for weeks without interruption
Reliability & security

Broadcast-grade by default.

Not "cloud SaaS with a status page." A set of deliberate choices that keep your live show on the rails when the network gets weird — and keep your data locked down the whole time.

🔒 Encryption

TLS 1.3 end-to-end

Every hop encrypted — browser → CDN → app server → database. Secrets at rest with AES-256-GCM. No plaintext anywhere.

Latency

<1 second

End-to-end measured from keypress to pixel on the talent monitor.

Uptime

99.99% SLA

Enterprise contracts include a broadcast-window SLA with credits.

Isolation

Tenant-scoped

Every row in the DB is tagged to your tenant. Cross-tenant access is impossible by design.

Supported identity providers
Okta · Microsoft Entra · Google Workspace · Generic OIDC · Generic SAML

Authentication

  • Passwords hashed with bcrypt, work factor 12
  • Session cookies are HttpOnly, Secure, SameSite=Lax, and scoped to the tenant hostname
  • Every request double-checks session tenant ID against the resolved subdomain — cross-tenant cookie reuse is impossible
  • Optional per-tenant SSO via OIDC or SAML 2.0, with JIT user provisioning from IdP attributes
  • Rate limits on login, signup, and SSO endpoints

Network security

  • TLS 1.3 end-to-end: browser → CDN → app → DB
  • Cloudflare DDoS protection at the edge, free on every tenant
  • trust proxy is locked to loopback and Cloudflare IP ranges only — no X-Forwarded-For spoofing possible
  • Content-Security-Policy headers on every response
  • Display tokens with per-token CIDR allowlist enforce venue-level access control on unauthenticated output endpoints

Audit & data handling

  • Append-only audit log — note sends, logins, role changes, token grants, settings changes — attributed to user and tenant
  • No third-party analytics, no tracking scripts, no data sold
  • Nightly encrypted backups; per-tenant data deletion on request
  • CSRF tokens on every state-changing request
  • Every note passes through a server-side HTML sanitizer before broadcast — scripts, handlers, and javascript: URLs cannot reach a talent monitor

Secrets & infrastructure

  • Per-tenant secrets (SSO signing keys, IdP certs) encrypted at rest with AES-256-GCM via a server-wide KEK loaded from env
  • Tenant-isolated data model — every row carries a tenant ID; all queries scoped via a dedicated helper layer
  • Cross-tenant isolation tests enforced in CI — tenant A provably cannot read or write tenant B's data
  • Single-region hosting (US-East) with wildcard TLS from Cloudflare Origin CA
  • Operational errors are logged without sensitive payloads — audit trail tells the what, logs tell the how
Read the full Security Overview →
For procurement, security, and IT teams. Includes our SOC 2 posture, DPA readiness, and incident response policy.
Pricing

Simple. Flat. Honest.

One price per tenant, per year. Unlimited users, unlimited displays, every feature on this page. Two-week free trial with no credit card required — you only pay once you're running live shows on it.

2-week free trial
Per-tenant subscription
$150/ year
✓ Try every feature free for 14 days — no credit card required
  • Unlimited users
  • Unlimited talent monitors
  • Full SSO (OIDC + SAML)
  • Display tokens with IP allowlist
  • Full audit log
  • Host-scoped tenant isolation
  • TLS 1.3 end-to-end encryption
  • Cloudflare DDoS protection
  • Email support
  • No per-seat fees, ever
Start your 2-week free trial

Annual billing only. Tenants can cancel any time — no refunds, no auto-renewals without confirmation. Enterprise customers with specific SLA, compliance, or SCIM provisioning requirements should contact us directly.

FAQ

Common questions from broadcast ops.

Does it work with the talent monitors we already own?

Yes. Any monitor that can display a browser tab works — which means every HDMI-input monitor on a modern broadcast cart, every OB truck reference screen, and any laptop plugged into an off-camera display feed. No proprietary hardware, no drivers, no firmware.

What happens if the stats desk loses network mid-broadcast?

The last-known note stays on the talent monitor until a new one arrives. The monitor never goes blank. When the stats desk reconnects, sends resume instantly — there's no sync step to wait on.

Can we lock the output URL to a specific venue or IP range?

Yes. Every display gets its own token, and each token supports a per-token CIDR allowlist. A token usable from anywhere is a one-checkbox decision; a token locked to your broadcast truck's public IP is another.

How long does onboarding take?

Under 30 minutes for an enterprise tenant: we provision your subdomain, you configure your SSO, you create display tokens for each monitor. First live broadcast typically happens within a day.

Is there a self-hosted / on-prem option?

Not today. Contact us if regulatory requirements demand it and we'll talk.

What's the pricing?

$150 per year, flat, per tenant. Unlimited users, unlimited displays, every feature listed on this page, billed annually. Two-week free trial with no credit card required. Enterprise customers with specific SLA, compliance, or SCIM provisioning requirements can contact us directly for a custom contract.

Ready to see it live?

14-day free trial — no credit card. Your workspace is ready in under a minute.

Start your 2-week free trial [email protected]