DEV Community

Manu Shukla
Manu Shukla

Posted on • Originally published at ecorpit.com

Video Streaming App Development Company: 2026 OTT Build, DRM and Bandwidth Costs

Video Streaming App Development Company: 2026 OTT Build, DRM and Bandwidth Costs

Summary. The app is the cheap part of an OTT platform. Delivering 100 TB of video a month through Amazon CloudFront's India edge costs about $8,685 at the rates published on 7 August 2026, against roughly $7,132 for the same volume out of the United States, a premium of about 22%. Studio-grade DRM adds a floor of $99 to $299.99 a month before a single licence is issued, and AWS Elemental MediaConvert gates DRM behind its Professional tier at $0.0120 per normalized minute rather than Basic at $0.0075. On top of that, India's IT Rules 2021 require five age classifications, an access-control mechanism on everything rated U/A 13+ or higher, a reliable age-verification mechanism on anything rated A, and a Grievance Officer based in India who must decide every complaint within fifteen days. Those four constraints, not the player UI, decide what a streaming build costs.

What actually drives the bill

Most OTT briefs arrive costed as an app project. The engineering estimate covers a catalogue, a player, sign-in, payments and a recommendations shelf, and it is usually about right. Then the platform launches and the monthly infrastructure invoice arrives at several times the build cost, every month, forever.

Three line items do that: encoding at ingest, storage of the mezzanine and renditions, and delivery to the viewer. Delivery dominates, and it scales with watch time rather than with users. Mux, which bills in minutes rather than bytes, publishes a useful conversion for anyone modelling this: one minute of 1080p video at 5 Mbps averages around 38 MB, so a gigabyte holds roughly 25 minutes at 1080p and roughly 40 minutes at 720p and 3.5 Mbps.

Run that in reverse and the scale of the problem is clear. A mid-sized Indian service pushing 100 TB a month at 720p is delivering about 4.1 million viewer-minutes. That is a modest audience by Indian standards, and it is already a five-figure monthly bill on the wrong architecture.

Delivery: the four published models compared

The four common ways to get video to an Indian viewer price on completely different units, which is why vendor comparisons usually go wrong. The table below normalises them to the same workload: 100 TB delivered in a month, encoded at 720p and 3.5 Mbps, which works out at roughly 4,096,000 minutes.

Delivery option Published unit rate Cost for ~100 TB / 4.1M minutes What the rate includes
CloudFront, India edge $0.109/GB after the first 1 TB, falling to $0.085 and $0.082 about $8,685 Raw CDN only; you run the packager and origin
CloudFront, US edge $0.085/GB, falling to $0.080 and $0.060 about $7,132 Same, priced from the cheaper region
Cloudflare Stream $1 per 1,000 minutes delivered about $4,096 Encoding and egress included, storage billed separately
Mux, basic quality at 720p $0.0008/min for the first 500,000, tiering to $0.00067 about $2,824 First 100,000 minutes a month free; encoding free on basic
Bunny CDN, volume network $0.005/GB for the first 500 TB about $512 Volume network, no per-minute video features

Two things fall out of that. First, a managed video platform can be materially cheaper than assembling the same thing on a general-purpose CDN, because the platform is buying delivery in bulk and passing part of it on. Second, Bunny's volume network at $0.005 per gigabyte is an order of magnitude below CloudFront's India rate, and its standard network for Asia and Oceania sits at $0.030 per gigabyte, still well under CloudFront. The trade is routing quality and feature depth, and it is a real trade rather than a free win.

The India premium deserves a specific note. CloudFront's data transfer out to origin is $0.160 per gigabyte for India against $0.020 for the United States, Mexico and Canada, the highest of the eight published regions on that line. Any design that pulls repeatedly from an origin outside the edge, or that skips origin shielding, pays that eight-fold difference on every cache miss.

Encoding: why DRM changes the tier you are on

AWS Elemental MediaConvert splits on-demand pricing into a Basic and a Professional tier, and the split is not about quality. Basic supports AVC with speed-optimized or balanced single-pass encoding, plus VP8 and VP9. Professional is where HEVC up to 8K, AV1, multi-pass encoding, the wide caption formats, ad signalling, multiple audio tracks and digital rights management live.

An Indian OTT service needs multi-language audio tracks on day one and needs DRM the moment it licenses anything it did not shoot itself. Both are Professional-tier features. Costing a business case at Basic-tier rates is the single most common error in OTT financial models.

MediaConvert volume band, US East (Ohio) Professional per normalized minute
First 50,000 normalized minutes $0.0120
Next 950,000 $0.0096
Next 9,000,000 $0.0072
Over 10,000,000 $0.0036
Basic tier, entry band, for comparison $0.0075

Normalized minutes are not output minutes. The per-minute rate is multiplied by a factor derived from resolution, frame rate, quality setting and codec, so a VP9 HD multi-pass quality-optimized output carries a 22.97x multiplier in AWS's own worked example, and the same content at AVC HD single-pass carries far less. Model the multiplier before the rate.

DRM: the floor charge nobody budgets for

Three DRM systems cover the device population: Google Widevine for Android and Chromium, Apple FairPlay Streaming for iOS, iPadOS, tvOS and Safari, and Microsoft PlayReady for Windows and many smart TVs. You need at least two, usually all three.

Widevine's security levels decide what resolution a device may receive. Level 1 performs decryption inside a Trusted Execution Environment and is what studios require for HD and UHD. Level 3 has no such environment, decryption happens in software, and it is the default on desktop Chrome and Firefox even on hardware capable of Level 1, which is why studios cap it at standard definition. If your licensing contract specifies HD, part of your addressable device base cannot legally receive it, and your player has to degrade gracefully rather than fail.

FairPlay carries a commercial gate rather than a technical one. Apple issues deployment credentials only to content owners or licensees whose team provides a streaming service to consumers, and states that requests from third-party accounts acting on behalf of content owners will not be approved. The credential has to sit in the operator's own Apple Developer Program account, which means it cannot be delegated to a build partner. Plan for that in the launch timeline, because the approval is not instant.

DRM option Access or plan fee Per-licence rate Coverage
Mux DRM add-on $100/month $0.003 per licence Bundled with Mux Video
Bunny MediaCage Enterprise $99/month $0.005 falling to $0.003 above 100,000 Multi-key, billed per device per key
EZDRM Universal DRM $199.99/month plus $199.99 first-year setup on the Complete plan 10,000 licences included Widevine, PlayReady and WisePlay over DASH
EZDRM FairPlay Professional $99.99/month plus $99.99 setup 10,000 licences included FairPlay over HLS
EZDRM AES-128 Clear Key $49.99/month plus $49.99 setup 10,000 licences included Encryption without studio-grade DRM

Note the metering unit. Bunny bills multi-key licensing per playback device per key, so a video track plus an audio track is two licences, not one. On a catalogue with separate audio renditions per language, that multiplies quickly. EZDRM offers a choice between per-licence and per-unique-user metering, which suits a subscription service with heavy repeat viewing far better.

India-specific considerations

An Indian OTT service is an online curated content publisher under the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021. That is product scope, not paperwork.

The Code of Ethics requires content to be classified into five categories: U, U/A 7+, U/A 13+, U/A 16+ and A, judged against seven listed factors including themes and messages, violence, nudity, sex, language, drug and substance abuse, and horror. Anything at U/A 13+ or higher needs access control mechanisms including parental locks. Anything rated A needs a reliable age verification mechanism for viewership, and the publisher must take all efforts to restrict access by a child, defined in Rule 2(1)(d) as any person below the age of eighteen years. Rule 11(5) requires the rating and content descriptors to be displayed before the viewer accesses the content, which puts them in the catalogue tile and the pre-roll, not in a settings page.

Grievance handling is a three-tier structure under Rule 9(3): publisher self-regulation, a self-regulating body, and a Central Government oversight mechanism. Rule 10 sets hard clocks. A grievance must be acknowledged within twenty-four hours and decided within fifteen days of registration, and if the publisher misses that window the complaint escalates automatically to the self-regulating body. Rule 11(2) requires a Grievance Officer based in India. A ticketing system with a twenty-four-hour acknowledgement SLA and a fifteen-day decision clock is therefore a launch requirement, not a phase-two feature.

Personal data is the other axis. Section 9(3) of the Digital Personal Data Protection Act, 2023 states that a Data Fiduciary shall not undertake tracking or behavioural monitoring of children or targeted advertising directed at children, and section 9(1) requires verifiable parental consent before processing a child's personal data. The Fourth Schedule of the DPDP Rules, 2025 exempts healthcare, education and a short list of narrow purposes. Streaming is not on that list, so an ad-supported tier has to be able to switch off behavioural targeting for any account it cannot establish as adult. The commencement notification issued on 13 November 2025 brings that section into force eighteen months after publication, which is 13 May 2027, so the design window is open now and closes then.

How we scope a streaming build

The order of work matters more than the technology choices, because the expensive decisions are made early and are hard to reverse.

  1. Model delivery first. Estimate concurrent viewers, average session length and bitrate ladder, then price the resulting minutes across at least two delivery options before choosing an architecture. A model that is wrong by a factor of two on watch time is wrong by a factor of two on the largest line item.
  2. Fix the DRM position. Decide which systems you need, whether metering is per licence or per user, and start the FairPlay credential request, because it runs on Apple's clock rather than yours.
  3. Design the classification and access-control layer into the catalogue schema. Retrofitting a five-value rating with parental locks and an age gate into a shipped catalogue is a migration, not a feature.
  4. Build the player and the offline path. Downloads change the DRM licence model, the storage model and the analytics model at once.
  5. Instrument quality of experience from the first release. Startup time, rebuffer ratio and bitrate distribution are the only evidence you will have when a CDN change looks cheaper on paper.

Our engagement model reflects that sequence. A fixed-scope discovery produces the delivery cost model, the DRM decision and the compliance map before any application code is written. The build then runs on milestones tied to those artefacts, and post-launch work is a retained senior team rather than a ticket queue, because CDN economics and store requirements both move faster than an annual contract.

eCorpIT builds this stack for media and consumer products from Gurugram, with AWS, Microsoft and Google as technology partners and CMMI Level 5 assessed delivery processes. Related reading: our mobile app development company in India guide covers partner selection, app development cost in India breaks down what each budget band buys, and the social media app development company piece covers the user-generated content variant of the same delivery problem, where basic-quality encoding and cold storage change the economics.

FAQ

How much does a video streaming app cost to run each month?

Delivery dominates. Pushing 100 TB a month at 720p costs about $8,685 through CloudFront's India edge, about $4,096 through Cloudflare Stream at $1 per 1,000 minutes, and about $2,824 through Mux basic quality. Encoding and DRM sit on top of that figure.

Why is DRM more expensive than the encoding itself?

Every DRM vendor charges a monthly access fee before any licence is issued. Mux charges $100 a month plus $0.003 per licence, Bunny MediaCage Enterprise charges $99 a month, and EZDRM plans run from $49.99 to $299.99 a month with setup fees. Those floors apply at any volume.

Do I need Widevine, FairPlay and PlayReady?

Usually all three. Widevine covers Android and Chromium browsers, FairPlay covers Apple platforms and Safari, and PlayReady covers Windows and many smart TVs. Skipping one removes a device class from your addressable audience, which matters more than the incremental licence cost.

Can a development agency hold our FairPlay credentials?

No. Apple approves deployment credentials only for content owners or licensees whose team provides a streaming service to consumers, and states that requests from third-party accounts acting on behalf of content owners will not be approved. The credential must live in your own Apple Developer Program account.

What do the IT Rules 2021 require of an OTT app?

Five content classifications from U through A, access control mechanisms including parental locks on everything U/A 13+ and above, a reliable age verification mechanism on A-rated content, ratings displayed before access under Rule 11(5), a Grievance Officer based in India, and the three-tier redressal structure in Rule 9(3).

How fast must we respond to a viewer complaint?

Rule 10 requires acknowledgement within twenty-four hours of the grievance being furnished and a decision communicated within fifteen days of registration. Miss the fifteen days and the complaint escalates automatically to your self-regulating body, which then has its own fifteen-day window to decide.

Does the DPDP Act affect an ad-supported streaming tier?

Yes. Section 9(3) prohibits tracking, behavioural monitoring and targeted advertising directed at children, and section 9(1) requires verifiable parental consent for a child's data. The Fourth Schedule exemptions cover healthcare and education, not streaming, so the ad stack needs an adult-only switch.

Should we use a managed video platform or build on a raw CDN?

Model both. At around 4.1 million minutes a month, Mux and Cloudflare Stream both priced below raw CloudFront India delivery in our comparison, because they buy egress in bulk. Raw CDN wins later, at volume-network rates, once you are running your own packager and origin shield.

How eCorpIT can help

eCorpIT is a Gurugram-based engineering organisation, founded in 2021, that builds streaming and media applications end to end: delivery cost modelling, packaging and DRM integration, native and cross-platform players, and the classification, access-control and grievance workflows the IT Rules 2021 require. We design systems aligned with DPDP Act 2023 requirements and work as senior-led, multi-disciplinary teams rather than staff augmentation. If you are scoping an OTT build or trying to bring an existing platform's delivery bill under control, talk to our team and we will start with the cost model.

References

  1. Understanding Mux Pricing, Mux documentation
  2. Estimating your Mux Video costs, Mux documentation
  3. AWS Elemental MediaConvert Pricing, Amazon Web Services
  4. Amazon CloudFront pay-as-you-go pricing, Amazon Web Services
  5. Amazon CloudFront Pricing, Amazon Web Services
  6. Cloudflare Stream Pricing, Cloudflare developer documentation
  7. Bunny Stream pricing, bunny.net documentation
  8. Google Widevine DRM security levels, bunny.net documentation
  9. EZDRM service pricing
  10. FairPlay Streaming, Apple Developer
  11. Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, Ministry of Electronics and Information Technology
  12. The Digital Personal Data Protection Act, 2023, India Code
  13. Digital Personal Data Protection Rules, 2025, G.S.R. 846(E), Ministry of Electronics and Information Technology
  14. DPDP Act commencement notification, G.S.R. 843(E), Ministry of Electronics and Information Technology

Last updated: 16 August 2026.

Top comments (0)