Technical Information Request List (TIRL)
Table of Contents
- Current Development Status
- Technology Architecture
- Development Ownership & Contracts
- Development Roadmap & Costing
- Product Features
- Platform–Content Integration
- Security & Data Protection
- Performance & Scalability
- Analytics & Measurement
- Maintenance & Team
- Known Technology Risks
1. Current Development Status
Stage of product development (concept / wireframes / prototype / MVP / beta)
The SelebZ platform is currently at an MVP stage. Core user flows such as authentication, content browsing, vertical scroll playback, adaptive video streaming, like & share videos, payment gateway are designed and partially implemented.
The architecture is production-ready and designed to scale to beta and public launch.
Links to any working demo or prototype
As SelebZ is a micro-OTT app, there isn't a public demo link available. The demo is provided as an APK file, which needs to be manually downloaded and installed on a mobile device. We will be happy to present and demonstrate the app in person during our meeting, showcasing its features, user interface, and functionality in detail.
Product requirement document (PRD)
To be documented.
Functional specification documents
To be documented.
2. Technology Architecture
High-level system architecture diagram
(Diagram Link)
The platform uses a cloud-native, microservices-based setup for scalable video delivery, secure content protection, and high user access. It divides its architecture into the Client Layer, API Gateway, Core Backend Services, Application Layer, Data Layer, Media Ingestion and Processing, and Content Delivery Network.
This structured approach ensures scalability, fault separation, performance improvement, and easier future growth.
Client Layer
The Client Layer includes mobile applications that run on Android and iOS platforms.
Users watch short-form and segmented video content through a vertical scrolling experience.
The client handles:
- User authentication
- Feed rendering
- Secure video playback
- DRM license acquisition
All client requests go through the API Gateway to ensure security and control.
DRM License Server
A separate DRM License Server enforces content protection. It issues DRM licenses only after:
- Successful authentication
- Entitlement validation
The server supports encrypted HLS/DASH playback and prevents unauthorized access, screen recording, and content theft. This meets the security needs of content owners and studios.
API Gateway
The API Gateway is the single entry point for all client and admin requests.
Its responsibilities include:
- Routing requests to backend services
- Validating authentication tokens
- Rate limiting and request throttling
- Centralized security enforcement
This layer improves system security, observability, and scalability.
Core Backend Services
The Core Backend Services layer contains independent microservices, each responsible for a specific business task:
- Auth Service — Handles user authentication and authorization, and generates and validates tokens.
- Entitlement Service — Validates user access rights based on subscriptions, purchases, or free access rules, and integrates with DRM license issuance.
- User Service — Manages user profiles, preferences, and account details.
- Admin Service — Supports admin tasks like content publishing, moderation, and configuration, and is used by internal CMS tools.
- Feed Service — Creates personalized and trending content feeds by using watch history, engagement signals, and caching for better performance.
- Movies & Parts Service — Manages movie metadata and breaks down content segments, maintaining relationships between full movies and shorter video parts.
These services are loosely connected and can scale independently.
Application Layer (Read / Write APIs)
The Application Layer breaks down business logic into Read APIs and Write APIs.
- Write APIs — User interactions (likes, views, watch progress); Admin content publishing actions
- Read APIs — Feed retrieval; Content metadata fetching; Playback configuration delivery
This separation helps improve performance and read scalability.
Data Layer
The Data Layer uses a polyglot persistence strategy. It selects databases based on access patterns and data characteristics.
- User DB — Stores user accounts, authentication data, and profile information; Optimized for consistent transactions
- Content Metadata DB — Stores movie, episode, and micro-content metadata; Supports fast read access for feed and playback services
- Watch History Store — Stores high-volume user engagement and watch progress data; Optimized for write-heavy workloads
- In-Memory Cache — Caches frequently accessed data such as feeds, metadata, and entitlement results; Reduces database load and improves response times
This layered storage model ensures low latency and horizontal scalability.
Media Ingestion & Processing
The Media Ingestion and Processing pipeline manages secure onboarding of content:
- Upload Service — Allows admins to upload raw video assets
- Video Processing Queue — Asynchronously manages processing jobs
- Transcoding Service — Converts videos into multiple resolutions (360p / 720p / 1080p); Generates adaptive bitrate streams
- DRM Encryption — Encrypts video segments using industry-standard DRM schemes; Ensures content protection before distribution
Encrypted Video Storage
All processed and encrypted video assets are stored in secure object storage.
- Videos are never stored or served in unencrypted form
- Access is strictly controlled via signed URLs and DRM licenses
Content Delivery Network (CDN)
A global Content Delivery Network (CDN) is used to deliver video content efficiently.
- Encrypted video segments are cached at edge locations
- Reduces latency and buffering for end users
- Scales automatically for high concurrent traffic
This ensures smooth playback and high availability across regions.
The proposed architecture is designed to support secure, scalable, and high-performance video streaming with DRM protection, personalized feeds, and modular backend services. The system is cloud-ready and can scale seamlessly from MVP to large-scale production deployments.
Front-end framework stack
Mobile Application
- Flutter (iOS & Android)
- Native video player with HLS/DASH support
- Adaptive bitrate streaming (ABR)
- Secure DRM playback
Admin Dashboard & Analytics
- Web-based CMS (React.js)
- Role-based access control
Back-end framework stack
Backend Architecture
- Microservices-based architecture
- REST APIs (GraphQL)
Technology Stack
- Node.js / Go Lang.
- Containerized services (Docker)
- API Gateway for routing and security
Asynchronous Processing
- Message queues for video processing, feed generation, and analytics
Database design overview
The SelebZ platform uses a polyglot persistence architecture that incorporates various database technologies based on how data is accessed, scalability needs, and consistency requirements. We use different databases because no single database works best for all tasks.
The database layer is logically divided into:
- Transactional data stores
- High-throughput event stores
- Read-optimized caches
- Analytical data stores
Database Strategy Principles
The database architecture is designed around the following principles:
- Service-level data ownership (each microservice owns its data)
- Horizontal scalability
- High availability
- Low-latency reads for feed and playback
- Write-optimized storage for engagement events
- Separation of OLTP and Analytics workloads
Logical Database Segmentation
Data Ownership & Isolation
- Each microservice owns its database
- No direct cross-service DB access
- All inter-service communication happens via APIs or events
This ensures: Fault isolation; Independent scaling; Safe schema evolution.
| DB Category |
Purpose |
| User & Identity Data |
Authentication, profiles, subscriptions |
| Content Metadata |
Movies, parts, feeds, ordering |
| Engagement Data |
Watch history, likes, views |
| Caching Layer |
Performance optimization |
| Analytics Store |
Business intelligence and insights |
Hosting / cloud infrastructure plan
Hosting & Cloud Infrastructure Plan (GCP)
The SelebZ platform is hosted on Google Cloud Platform (GCP). It uses a containerized, microservices-based architecture that offers high availability. This architecture is designed for:
- High traffic video consumption
- Low-latency global content delivery
- Independent service scaling
- Secure DRM-protected streaming
- High write throughput for analytics and engagement events
Infrastructure Compute Model
- All backend application code runs inside Docker containers managed by Google Kubernetes Engine (GKE).
- Auto-scaling is enabled at both the pod and node levels.
- Video processing workloads run as short-lived container jobs to optimize cost.
High-Level Hosting & Infrastructure
(Diagram_link)
The platform uses a container-first cloud setup with Google Kubernetes Engine for application workloads. It offers fully managed data services for storage and global edge services for content delivery. This design ensures scalability, reliability, and operational efficiency.
Content delivery network (CDN) strategy
SelebZ uses a global Content Delivery Network (CDN) first video delivery strategy to ensure low latency and high-quality playback for short-form vertical video content across different network conditions.
The CDN strategy is designed to:
- Minimize video start time
- Change video quality based on network conditions
- Reduce load on origin infrastructure.
- Support DRM-protected content delivery at scale
CDN Provider & Integration
CDN Platform
- Google Cloud CDN & Media CDN
- Integrated directly with Google Cloud Load Balancer and Cloud Storage
CDN Role in Architecture
- Serves all video segments and manifests
- Serves static assets (thumbnails, previews)
- Acts as the only public-facing access layer for media content
Video Delivery Model
Streaming Protocols
- HLS (HTTP Live Streaming) for iOS
- MPEG-DASH for Android and Web
Video Segmentation
- Videos are segmented into small chunks (2–6 seconds) during processing
- Each movie part (5–10 minutes) is delivered as multiple adaptive segments
Adaptive Bitrate Streaming (ABR)
Supported Renditions
- 360p (low bandwidth)
- 720p (standard)
- 1080p (high bandwidth)
How Adaptation Works
Player continuously monitors: Network bandwidth; Buffer health; Device capability. It automatically switches between renditions without interrupting playback.
This ensures: Smooth playback on unstable networks; Optimal quality on high-speed connections.
DRM & Secure Delivery
Content Protection
- All video segments are DRM-encrypted
- Supports Widevine DRM
License Flow
- CDN delivers encrypted content
- Client requests license from DRM License Server
- Playback allowed only for authorized users
Security Benefits
- No raw video accessible via CDN
- Prevents piracy and unauthorized downloads
- Secure entitlement-based playback
Origin Protection Strategy
Origin Setup
- Encrypted video files stored in private Cloud Storage buckets
- Buckets not publicly accessible
CDN Access Control
- Only CDN service accounts allowed to access origin
- Optional: Signed URLs; Token-based authorization
Cache Strategy
Cacheable Content
- Video segments
- Playback manifests
- Thumbnails and previews
Cache Policy
- Long TTL for immutable video segments
- Versioned URLs to allow safe cache invalidation
- Regional cache optimization for India-first audience
Geographic Delivery Strategy
Initial Focus
- India-first rollout
- CDN edge presence close to users
Performance Optimization Techniques
- HTTP/2 and HTTP/3 support
- Gzip/Brotli compression for manifests
- Prefetching next video parts for seamless vertical scrolling
- Reduced latency via edge caching
SelebZ uses a CDN-first, adaptive streaming approach that employs encrypted multi-bitrate delivery. This strategy ensures steady, secure, and high-quality video playback, even with different network conditions. It also reduces infrastructure load and allows for easy scalability.
3. Development Ownership & Contracts
In-house vs outsourced development model
The Selebz platform is developed using a primarily in-house engineering model, supplemented by AI-assisted development tools to accelerate delivery and improve developer productivity. The company maintains full ownership and control over all intellectual property, source code, and system architecture.
In-House Development
- Core platform development is handled by full-time in-house developers
- All critical systems including: Backend services; Content pipelines; Security and DRM integrations; Infrastructure and deployment
- Architecture decisions and code reviews are performed internally
AI-Assisted Development
- AI agents (e.g., Claude opus 4.6) are used as developer productivity tools
- AI is used for: Code scaffolding; Refactoring assistance; Test generation; Documentation support
Development contracts with vendors or agencies
Not required, as no external vendors or agencies are currently engaged for core platform development. All development activities are performed by internal teams governed by employment agreements.
IP ownership clauses in vendor contracts
Not applicable, as development is performed internally. All intellectual property, including source code and related artifacts, is owned by SelebZ as per internal employment and appointment terms.
Source code repository access structure
Source code repositories are owned and controlled by Selebz. Access is role-based and limited to internal developers only. All code changes follow internal review and approval processes.
4. Development Roadmap & Costing
Remaining development milestones
Covered in Financial Projections, as appended.
Timeline for MVP (Minimum Viable Product) launch
Covered in Financial Projections, as appended.
Timeline to full public launch
Covered in Financial Projections, as appended.
Estimated cost to reach MVP
Covered in Financial Projections, as appended.
Estimated cost to reach scale
Covered in Financial Projections, as appended.
5. Product Features
Core user features list
The SelebZ application is designed as a vertical micro-frame OTT experience, optimized for short attention spans and continuous content consumption, similar to Instagram Reels but with structured episodic content.
Authentication & User Access
- Mobile number / email-based signup and login
- Secure authentication with Token management
- Profile management and user preferences
Content Discovery & Consumption
- Vertical scroll-based movie playback
- Each movie divided into sequential parts (5–10 minutes)
- Auto-play of next part on scroll
- Personalized feed based on viewing behavior
- Trending and recommended content sections
Video Playback Experience
- Adaptive bitrate streaming (360p / 720p / 1080p)
- Seamless playback across varying network conditions
- Fast video start and low buffering
- DRM-protected playback
User Engagement
- Watch progress tracking per movie part
- Resume playback from last watched position
- Like, share, and save content
- Content tagging and category-based browsing
Creator / content management tools
Content Upload & Processing
- Secure video upload interface
- Multi-bitrate transcoding pipeline
- Thumbnail and preview generation
- DRM encryption during processing
Content Structuring
- Create movies and define part sequencing
- Attach metadata (language, genre, tags)
- Control content visibility and release timing
- Publish, unpublish, or archive content
Content Quality Control
- Validation of video formats
- Playback preview before publishing
- Error handling and retry mechanisms
Admin and analytics dashboard features
Platform Administration
- User management and access control
- Content approval workflows
- Moderation tools
- Role-based admin access
Content Performance Analytics
- Views, watch time, and completion rates
- Drop-off analysis per movie part
- Trending content insights
- Region and device-based performance
User Analytics
- Daily / Monthly Active Users (DAU / MAU)
- Retention and cohort analysis
- Engagement metrics (likes, shares, scroll depth)
Operational Monitoring
- Video processing status
- CDN performance metrics
- Error and failure tracking
- Infrastructure health overview
The product roadmap is designed to evolve toward advanced personalization, creator-led content publishing, and AI-driven recommendations as the platform scales.
Monetization feature readiness
The platform is built with multiple monetization paths, allowing flexibility as the business evolves.
Subscription-Based Monetization
- User subscription plans
- Entitlement-based content access
- Plan upgrade and downgrade support
- Integration with payment gateways
Advertisement-Based Monetization
- Ad-ready playback architecture
- Pre-roll and mid-roll ad support
- Ad inventory configuration
- Targeting based on content and user behavior
Hybrid Monetization Model
- Free content with ads
- Premium content behind subscription
- Early access or exclusive content options
Monetization Analytics
- Subscription conversion tracking
- Revenue per user (ARPU)
- Ad performance and fill rates
- Content ROI insights
6. Platform–Content Integration
SelebZ follows a structured, automated, and secure content integration pipeline that manages the full lifecycle of content — from ingestion and processing to secure delivery and scheduled release.
The platform is designed to handle episodic micro-frame content while maintaining OTT-grade quality, rights enforcement, and scalability.
Content ingestion workflow
Ingestion Sources
- Internal content production teams
- Approved creators and partners
- Studio-uploaded long-form content adapted for micro-frame delivery
Workflow Steps
- Content uploaded via secure admin/creator interface
- File validation (format, duration, resolution)
- Storage of raw assets in a restricted upload bucket
- Ingestion job created and queued for processing
- Status tracking available in admin dashboard
Key Characteristics
- Authenticated uploads only
- Role-based access control
- Retry and failure handling
- Asynchronous ingestion for scalability
(Diagram_link)
Encoding / transcoding pipeline
To convert uploaded content into multi-bitrate, device-compatible formats optimized for adaptive streaming.
Pipeline Architecture
- Triggered automatically after ingestion
- Job-based processing using FFmpeg
- Parallel transcoding for efficiency
Output Formats
- 360p (low bandwidth)
- 720p (standard)
- 1080p (high quality)
Streaming Standards
- HLS for iOS
- MPEG-DASH for Android
Additional Processing
- Thumbnail and preview image generation
- Audio normalization
- Packaging with playback manifests
Rights management and DRM plan
Content Rights Management
- Rights defined at movie and part level
- Region-based availability controls
- Time-bound access (expiry dates)
- Subscription and entitlement-based access
DRM Strategy
- Widevine DRM integration
- Encryption applied during packaging
- License issuance controlled by entitlement service
Security Measures
- Encrypted video segments at rest and in transit
- DRM license validation before playback
- No direct access to raw media files
Metadata Categories
- Content details: title, description, language, genre
- Structural metadata: movie → part mapping
- Discovery metadata: tags, categories, mood
- Technical metadata: duration, bitrate, resolution
- Business metadata: rights, monetization type
Usage
- Feed generation
- Search and filtering
- Recommendation algorithms
- Reporting and analytics
Content release scheduling tools
Scheduling Capabilities
- Scheduled publish and unpublish
- Part-by-part release control
- Regional release configurations
Release Models Supported
- Full movie drop
- Episodic daily/weekly release
- Early access for premium users
The SelebZ content integration platform combines automated ingestion, adaptive transcoding, DRM-based rights enforcement, rich metadata tagging, and flexible release scheduling to support scalable, secure, and high-quality content delivery.
7. Security & Data Protection
The SelebZ platform is designed with a security-by-design and privacy-by-default approach.
User data, content assets, and payment information are protected through layered security controls, strict access policies, and compliance-ready data governance frameworks aligned with Indian regulatory requirements.
User data collection plan
The platform collects only necessary data required for service delivery and monetization.
Identity & Account Data
- Mobile number / email ID
- Contact Details
- Authentication credentials (hashed)
- Device identifiers (non-persistent)
Usage & Engagement Data
- Watch history
- Playback progress
- Content interactions (views, likes, scrolls)
Subscription & Transaction Data
- Subscription status
- Plan details
- Transaction references
Data privacy compliance plan (India DPDP Act readiness)
The platform is designed to be compliant with the Digital Personal Data Protection (DPDP) Act (India).
Consent Management
- Explicit consent during signup
- Consent logs stored securely
- Ability to withdraw consent
User Rights Enablement
- Right to access personal data
- Right to correction and erasure
- Account deletion workflows
Data Localization
- User personal data hosted in India-based GCP regions
- No cross-border data transfer without legal basis
Data Retention Policy
- Defined retention periods per data category
- Automatic purging of inactive or expired data
Security protocols
Application Security
- HTTPS/TLS encryption for all communications
- Secure authentication and token-based access
Infrastructure Security
- Private VPC with firewall rules
- No public database access
- IAM-based service permissions
Data Security
- Encryption at rest and in transit
- Secure secrets management
- Regular access audits
Content Security
- DRM-protected video assets
- No public access to raw media
- CDN-origin protection
Monitoring & Incident Response
- Centralized logging and monitoring
- Real-time alerts for suspicious activity
- Defined incident response process
Payment gateway integration plan
- Payments handled via PCI-DSS compliant third-party gateways
- Platform does not store card or UPI credentials
- All sensitive payment data processed externally
Supported Payment Methods
- UPI (Recurring Payment supported)
- Credit / Debit Cards (EMI supported)
- Net Banking
- Wallets (Amazon Pay, Mobikwik etc.)
- BNPL (Buy now Pay Later)
Integration Flow
- User initiates purchase
- Redirect to secure payment gateway
- Payment confirmation received via webhook
- Subscription entitlements updated internally
Security Controls
- Webhook signature verification
- Transaction reconciliation
- Fraud detection via gateway tools
The SelebZ platform implements robust security and data protection practices aligned with India's DPDP Act, using encryption, access controls, consent-driven data governance, and secure third-party payment processing to ensure user trust and regulatory readiness.
Load assumptions for first 12 months
The platform is designed to support ~500,000 to 900,000 active users within the first 12 months.
- Total app downloads expected to grow from ~120,000 (Month 1) to ~6,000,000 (Month 12)
- Activated users expected to reach ~900,000 by Month 12
- Average content consumption assumed at 15 minutes per DAU per day
- Architecture is horizontally scalable to handle further growth beyond Year 1.
Stress test plan (if any)
Formal large-scale production stress testing is planned prior to major public releases.
- Load testing is conducted on critical APIs (authentication, content listing, playback initiation)
- Auto-scaling behavior is validated under simulated peak DAU and traffic bursts
- CDN and video delivery layers are tested for concurrent stream handling
- Database read/write performance is monitored under simulated high-load conditions
Video hosting and streaming bandwidth cost model
Video hosting and streaming costs are modeled based on actual DAU consumption, CDN bandwidth usage, and average viewing behavior.
Key assumptions:
- Average watch time: 15 minutes per DAU per day
- Data consumption: ~6 MB per minute
- Data usage per DAU per day: ~0.09 GB
- CDN + infra cost: ₹4 per GB
- Streaming primarily served via CDN to reduce origin
Projected costs (Year 1):
- Monthly infra & CDN costs scale from ~₹10,000 (Month 1) to ~₹5,02,000 (Month 12)
- Estimated total Year-1 infrastructure & CDN cost: ~₹20.65 lakhs
Costs scale linearly with DAU and are optimized via adaptive bitrate streaming and CDN caching.
9. Analytics & Measurement
User behavior tracking design
The platform implements a comprehensive user behavior tracking system to monitor engagement, retention, and conversion across the user lifecycle.
Tracked user events include:
- App installs, sign-ups, logins, and session duration
- Content discovery events (search, browse, recommendations)
- Video playback events (play, pause, seek, completion rate)
- Watch time per session and per content item
- Drop-off points during video playback
- Device type, platform (Android / iOS), and network conditions
- Subscription, ad interaction, and payment-related events
Architecture approach:
- Client-side event tracking from mobile and web applications
- Events are ingested via analytics pipelines and stored in analytical databases
- Aggregated metrics are generated for real-time and historical analysis
- Personally identifiable data is minimized and anonymized where required
Content performance metrics planned
The platform tracks detailed content-level performance metrics to evaluate audience engagement and optimize content strategy.
Key content metrics include:
- Total views and unique viewers per content item
- Average watch time and completion rate
- Viewer drop-off timelines
- Engagement score based on watch time, likes, and shares
- Content popularity trends over time
- Performance by content category, language, genre and creator
- Monetization metrics such as ad impressions and revenue per content
- Monetization by regions.
Dashboard mockups
To be documented.
10. Maintenance & Team
Technical team structure
The platform is developed and maintained by an in-house cross-functional team with clearly defined ownership across engineering, product, and data.
Current team composition:
- Technology Team (6 members) — Backend Engineers (API, services, databases); Frontend / Mobile Engineers (app and web interfaces); DevOps / Infrastructure Engineering (cloud, CI/CD, monitoring)
- Product & Data Team (2 members) — Product Management (feature planning, roadmaps, user experience); Data & Analytics (metrics, dashboards, insights)
CTO or tech lead profile
The technology function is led by Varun Agrawal (CTO), who oversees platform architecture, scalability, security, and long-term technical roadmap.
CTO responsibilities include:
- Defining system architecture and technology standards
- Ensuring scalability, performance, and security best practices
- Reviewing critical code and infrastructure decisions
- Managing technical roadmap and team execution
- Overseeing post-launch reliability and optimization
Post-launch maintenance plan
Post-launch maintenance is handled by the in-house technical team with structured monitoring and operational workflows.
Maintenance scope includes:
- Continuous monitoring of application uptime and performance
- Cloud infrastructure health and cost optimization
- Database maintenance, backups, and scaling
- Security patches and dependency upgrades
- Streaming quality and CDN performance monitoring
Operational readiness:
- Automated alerts for system anomalies
- Regular health checks for APIs and background jobs
- Rollback mechanisms for critical releases
Bug-fix and update cycle plan
The platform follows a structured release and bug-fix cycle to ensure stability while enabling rapid iteration.
Bug-fix approach:
- Critical production issues: Hotfix deployment within 24 hours
- High-priority bugs: Fixed in the next sprint cycle
- Non-critical issues: Planned in regular backlog grooming
Update cycles:
- Feature updates released in bi-weekly or monthly cycles
- Infrastructure and performance improvements rolled out incrementally
- App updates aligned with mobile platform release requirements
11. Known Technology Risks
Key technical dependencies
The platform relies on a set of core technical components and infrastructure services that are critical to overall system operation.
Key dependencies include:
- Cloud infrastructure (compute, storage, networking)
- Video transcoding and processing pipeline
- Content delivery network (CDN) for video streaming
- Authentication and entitlement services
- Mobile platform ecosystems (Android / iOS app stores)
All critical components are designed with horizontal scalability, monitoring, and failover strategies to reduce operational risk.
Third-party APIs or services relied upon
The platform integrates with the following third-party services to support non-core but essential functionalities:
- Cloud service provider (for hosting, storage, and managed services)
- CDN provider (for efficient video delivery)
- Payment gateway(s) for subscriptions and transactions
- DRM and content protection services
- Analytics and monitoring tools
Third-party integrations are abstracted behind service layers to allow replacement or migration with minimal impact if required.
Single points of failure identified
Potential single points of failure have been identified and addressed during system design.
Identified areas and mitigations:
- Central databases: Mitigated via replication, backups, and high-availability configurations
- Video storage and delivery: Mitigated through multi-zone storage and CDN edge caching
- Authentication and entitlement services: Designed for horizontal scaling with redundancy
- Background processing pipelines: Decoupled using message queues to prevent cascading failures