Platform Features

Everything You Need.
Nothing You Don't.

63 modules. 200+ capabilities. Built for teams that need real control over their digital assets, not another file locker with a search bar.

See it in 30 seconds

Your Files. Your Bucket. No Lock-In.

ZDAM catalogs and secures assets in the storage you already own, with full platform parity on every provider. Switch providers without migrating a single file.

Explore Storage

Asset Management & Versioning

Full lifecycle management, from upload through distribution to archival.

Upload Anything

30+ file types: images, video, audio, documents, presentations, fonts, 3D models, RAW files, web links, and YouTube. TUS resumable uploads up to 10GB.

Deep Zoom Viewer

Tile-based DZI generation for ultra-high-resolution images. Pan and zoom gigapixel files instantly with multi-resolution pyramids.

Image Editing & Conversion

In-browser cropping with aspect ratio presets, format conversion (JPEG, PNG, WebP, TIFF), and AI Studio for generative editing.

Video Transcoding

GPU-accelerated transcoding with FFmpeg and NVIDIA hardware encoding. Multi-resolution output, timeline commenting, and frame-accurate annotation canvas.

Version Control

Full version history with side-by-side comparison. Upload new versions, restore any previous version with one click. Hero version selection for display.

Lightbox

Personal lightboxes for curating selections. Fullscreen viewer with thumbnail carousel, shareable links, and one-click conversion to collections.

Duplicate Detection

Hash-based duplicate detection with merge and consolidation tools. Visual similarity grouping to keep your library clean.

Bulk Operations

Move, tag, edit metadata, share, watermark, and delete in bulk, all with progress tracking and cancellation. NLE export for Premiere Pro and Final Cut.

Trash & Recovery

Soft deletion with configurable grace periods. Full recovery with metadata intact. Permanent deletion with cascade cleanup of storage and search index.

AI Capabilities

AI built in, not bolted on. Automatic enrichment, interactive creation, and intelligent governance.

Multi-Provider

AI Auto-Tagging

Automatic tag generation from image and document content with confidence scoring on every tag. Choose your provider, or use multiple simultaneously.

  • ✓ Google Cloud Vision, AWS Rekognition, OpenAI
  • ✓ OCR text extraction from images and documents
  • ✓ Face detection and recognition
  • ✓ Scene, object, and color analysis
  • ✓ Tag acceptance workflow (pending/accepted/rejected)
  • ✓ Bulk AI processing with background workers
  • ✓ Per-tenant usage tracking and cost logging

AI Descriptions

Natural-language descriptions generated from visual content. Used for accessibility, search enrichment, and metadata population. Provider-agnostic.

AI Studio

Image Generation & Editing

Generate images from text prompts with Gemini Flash/Pro or DALL-E 3. Iterative chaining to refine results. Save as new version or standalone asset. Prompt template library, tenant-level cost controls, and full audit trail.

Stand-Out Feature

Bring Your Own Keys (BYOK)

Connect your own Amazon Bedrock, Google Gemini, or Anthropic API keys, and every AI feature on this page runs on your credentials, your rate limits, and your bill, not a shared ZDAM key. Keys are encrypted at rest and scoped per tenant.

AmazonGeminiAnthropic

Bring Your Own Storage

Your assets stay in your buckets, under your control. No vendor lock-in.

WasabiAmazon S3Google Cloud StorageThinkOnBackblaze B2DigitalOcean SpacesCloudflare R2Any S3-Compatible

Platform-Managed Storage

Wasabi default, AWS S3 premium. Automatic bucket provisioning per tenant with presigned URLs for direct upload and download.

Connected Sources

Connect any S3-compatible provider as an additional source. Full ZDAM features on your existing buckets: metadata, search, previews, watermarks, sharing.

Multi-Source Workspaces

Each connected source operates as an isolated workspace. Browse, search, and manage assets across all sources from a single interface. Move assets between sources.

Encrypted Credentials

AES-256-GCM encryption on all storage credentials. Connection validation with full permission audit. Credentials masked in API responses.

Health Monitoring

Automated health checks every 6 hours via background workers. Storage quota management with pre-flight upload checks to prevent failed uploads.

Distributed Processing

55+ async background workers. CPU-optimized image workers, GPU-accelerated video workers. 7-dimension resource throttling with per-tenant caps.

Approval Workflows

Real content review processes. Not a simple approve/reject checkbox.

Workflow State Machine

Submit → In Review → Approve | Request Changes | Reject | Delegate | Escalate | Recall → Resubmit

Multi-Stage Workflows

Customizable stages with configurable triggers based on asset metadata, folder, or type. Auto-start workflows on upload. Urgency levels: Normal, High, Critical.

Delegation & Escalation

Reassign approvals to another team member. Automatic escalation when deadlines pass (checked every 5 minutes). Approver override for administrators.

Threaded Comments & @Mentions

Discuss decisions in threaded approval comments with @mention support for pulling in the right people. Request changes with detailed feedback.

Multi-Channel Notifications

Every state change triggers notifications through your chosen channels: email, Slack, Google Chat, Teams, in-app, or webhook. Digest aggregation available.

Complete Audit Trail

Full workflow history with timestamp, actor, and action. Decision audit trail for compliance. Workflow analytics and reporting.

Recall & Resubmit

Requestors can recall submissions at any stage. After requesting changes, submitters resubmit with updates. The full cycle, not just approve/reject.

Branded Portals

White-label galleries for distributing assets to partners, press, and clients, without internal DAM access.

Public

Open to anyone

Link-Only

URL required

Password

Shared secret

Authenticated

Login required

SSO

Enterprise IdP

Request Access

Approval-gated

Full Branding & Theming

CSS variable injection for complete customization. Upload logos (light/dark), set colors, typography, and spacing. Email branding, favicon generation, and persona presets.

Custom Domains

Map any domain to a portal (e.g., assets.yourclient.com). DNS verification workflow with guided setup. Automatic SSL via Caddy. Multiple domains per portal.

Visitor Uploads

Accept submissions through configurable upload forms. Review workflow ensures quality before publication. Access request system with auto-approval engine.

Portal Analytics

Visitor engagement tracking, download funnel analytics, asset performance metrics. Session-level identification with time-partitioned data and export capabilities.

Dedicated Visitor SPA

Portals run as a separate single-page application, not an embedded view of the DAM. Full-text search, collection browsing, and magic link authentication.

Rate Limiting

Token bucket rate limiting per portal with configurable thresholds. Protect your portals from abuse without impacting legitimate visitors.

Integrations & Plugins

Meet your team where they already work. First-party plugins, not third-party add-ons.

Google Drive

Bidirectional sync with real-time webhooks. Reference, copy, or hybrid import. 24 API endpoints.

Slack

Bot notifications, slash commands, interactive approval buttons, and thread context.

Chrome Extension

Side panel for searching and dragging assets into any web page. Infinite scroll with caching.

Adobe Creative Cloud

InDesign and Photoshop plugin. Browse, place, relink assets. TUS upload for exports.

WordPress

Media library tab, Gutenberg blocks, shortcodes, and REST proxy. Featured image support.

Canva

Sidebar integration. Browse, search, and drag assets into designs. Watermark enforcement.

Microsoft Teams

Adaptive card notifications with approval action buttons directly in Teams.

Google Chat

Threaded messages with @mentions, rich formatting, and two-way interaction.

Dynamic Metadata & Custom Fields

23 field types. Tenant-specific panels. EXIF extraction. Faceted search on every field.

23 Configurable Field Types

Text InputTextareaRich TextSingle SelectMulti-SelectTaxonomyKeywordsDateDateTimeDate RangeNumberCurrencyToggleAsset LinkUser LinkCollection LinkComputedURLEmailColor PickerStar RatingHeadingInfo Box

Configurable Panels

Create tenant-specific panels with drag-and-drop ordering. Configure display context: sidebar, main area, header, or hidden. Primary field sync for titles.

EXIF & XMP Auto-Extraction

Camera data, GPS coordinates, color profiles extracted automatically. Auto-mapping to custom fields. Bulk extraction via background workers.

Hierarchical Taxonomies

Database-backed taxonomy trees for efficient hierarchical options. Tag governance with normalization pipeline and fuzzy deduplication.

Watermarking & Brand Protection

Server-side burned-in watermarks that can't be stripped. Dual-rendition architecture keeps originals untouched.

Template System

Reusable templates with text, images, or both. 9-point position grid, configurable opacity, rotation, scale, and tiling. Dynamic variables: username, date, asset name.

Three-Level Cascade

Asset-level overrides group-level overrides tenant-level defaults. The most specific rule wins. MIME-type routing for images, video, and PDF.

Automatic Enforcement

Portal downloads watermarked automatically. Canva exports respect settings. Download grant tracking with full audit trail and integrity reporting.

7-Channel Notifications

The right message, through the right channel, at the right time.

In-App

Email

Push

Slack

Google Chat

Teams

Webhooks

User Preferences

Per-user channel selection by event type. Category opt-in: mentions, approvals, comments, shares, workflows, system. Quiet hours to mute off-hours notifications.

Digest Aggregation

Hourly, daily, or weekly rollups instead of notification floods. Smart batching and deduplication for high-volume events.

Webhook Delivery

HMAC-SHA256 signed POST to any endpoint. Configurable event filters, retry logic with exponential backoff, and delivery audit logs.

Archive-Grade Governance

Built for teams who answer to compliance, legal, and records retention, not just marketing.

Fixity & Integrity Monitoring

A checksum is generated for every asset at ingest and re-verified on a schedule you set. If a stored file ever changes, whether from corruption, a storage fault, or tampering, a named administrator is alerted automatically.

Immutable Provenance Metadata

Capture source system, ingest operator, and original filename at the moment of ingest, then lock those fields. Visible and searchable forever, editable by no one, including admins.

Rights Expiry & Embargo Dates

Per-asset rights expiry with an advance alert to a named owner, and automatic access restriction the moment it lapses. Hold an asset behind an embargo date and it opens itself on release day.

Retention & Disposition Workflow

Formal retention schedules by asset class. When a period elapses, assets land in a review queue, never an automatic bulk delete. Disposition requires named-role sign-off, recorded as a permanent record.

Audio & Video Transcript Search

Automatic transcripts for audio and video, including broadcast formats, indexed for full-text search. Search a spoken phrase and jump straight to that moment in the player.

Campaign Workspaces

Dedicated environments with their own assets, approvals, and access, managed separately from the main library, with no practical limit on concurrent active campaigns.

Enterprise Security

Database-per-tenant isolation. Not row-level filtering. Real separation.

True Data Isolation

Every tenant gets their own dedicated database and storage buckets. Completely separate schemas, migrations, and connection pools.

Enterprise SSO

SAML 2.0 with automatic metadata parsing. OIDC with PKCE flow. JIT provisioning, email domain routing, and portal SSO. Works with Okta, Azure AD, Google, and more.

Multi-Factor Authentication

TOTP with backup codes. Tenant-level MFA enforcement policies. Configurable session timeouts and password requirements.

API Security

Scoped API keys with SHA-256 hashing, rotation, and expiry. CSRF protection, rate limiting, SSRF protection with DNS pinning, and Safe Browsing integration.

Encryption & Headers

AES-256-GCM credential encryption. CSP, HSTS (1-year preload), X-Frame-Options DENY, and Permissions-Policy. All secrets environment-based, never in code.

Audit & Compliance

Comprehensive logging of auth attempts, authorization failures, deletions, and sensitive operations. GDPR-ready data export. HMAC-signed webhooks.

Mobile & PWA

  • ✓ Mobile-first responsive with 6 Tailwind breakpoints (mobile through ultra-wide)
  • ✓ Installable on desktop and mobile home screens
  • ✓ Offline asset browsing with intelligent caching strategies
  • ✓ Background sync for queued uploads when connectivity returns
  • ✓ Push notifications for approvals and workflow updates
  • ✓ Touch-optimized drag-and-drop and swipe navigation

Accessibility

  • ✓ WCAG AA compliant with 4.5:1 minimum contrast ratio
  • ✓ Full keyboard navigation with Command palette (Cmd+K)
  • ✓ 40+ ARIA attributes and semantic roles across components
  • ✓ Screen reader support with live region announcements
  • ✓ Built on Radix UI primitives (WAI-ARIA compliant)
  • ✓ Automated axe-core accessibility testing in E2E suite

Ready to See It in Action?

Book a demo to see how ZDAM handles your team's specific workflow.

Henry Stewart DAM Events

DAM New York · Oct 1 & 2 · New York Hilton

Are You at the Show With Us?!

Come see ZDAM in person. Schedule a demo today!

Schedule a Demo