Security and Compliance
Effective June 30, 2026
1. Our approach
Security and compliance are part of how we work, not an afterthought. We keep the data the website collects to a minimum, and we handle client and engagement data under the agreement signed for that work. This page describes our posture at a high level. The specific, binding commitments for any engagement live in that engagement's contract.
2. Website security
The site runs on Cloudflare with TLS for all traffic, provider-managed encryption at rest, access controls on the systems that receive form submissions, and a short list of vetted sub-processors (listed in our Privacy Policy). We collect only the personal data the site needs to function.
3. Client and engagement data
When we build systems, run audits, or operate services for a client, we follow the security requirements that fit the data and the client's environment. Wherever possible we work inside the client's own infrastructure and accounts, so the data stays under their control and their existing safeguards.
4. Regulatory compliance
We take regulatory obligations seriously and design our work to meet the ones that apply:
- HIPAA. For engagements that involve protected health information, we follow HIPAA's requirements for that data and put a Business Associate Agreement in place before any real protected health information is handled.
- Privacy laws. We honor the data-subject rights in laws such as GDPR and the US state privacy laws, as described in our Privacy Policy.
- Frameworks such as SOC 2. Where a client requires a specific security framework, we operate within those requirements as part of the engagement and apply controls consistent with recognized best practices.
We do not publish certifications we do not hold. If your procurement process needs a security questionnaire, specific documentation, or a framework attestation, raise it during scoping and we will tell you what we can provide.
5. Reporting a concern
If you believe you have found a security issue, or you have a question about how we handle data, email hello@blinkz.ai and we will respond promptly.