Security and reliability are built into how Blueprint runs.
Blueprint protects customer data with strong security controls, continuous monitoring and reliable, scalable hosting.
- SOC 2 Type II and ISO 27001 data centersOperated by Rackspace
- 99.5% uptime SLABlueprint Cloud, measured monthly
- Encrypted in transit and at restTLS 1.2 or 1.3, AES-256 or better
- SAML 2.0 single sign-onVerified with Entra ID, Okta and ADFS
- US data residencyA private cloud dedicated to Blueprint
The SOC 2 Type II and ISO 27001 certifications belong to Rackspace, which operates the data centers. Details are below.
How customer data is protected
Sensitive data is flagged, never collected
Sensitive data detection flags where an automation is handling data it probably shouldn't be. It reports the location and the pattern. It doesn't extract or store the data itself.
Each estate stays with its owner
Each customer is provisioned with a dedicated environment, from the application layer to the database. Automation definitions, run history and reporting belong to the customer, and we don't use one customer's estate to improve what another customer sees.
Encryption and backups
Data is encrypted in transit using TLS 1.2 or TLS 1.3, and customer databases are encrypted at rest using AES-256 or better. Backups reside in off-site locations for geographic redundancy, are transmitted over private or encrypted connections, and production backups are retained for 30 days.
Access control and single sign-on
User access is governed by granular role-based access controls. Blueprint supports SP- and IdP-initiated single sign-on via SAML 2.0, verified to work with Entra ID, Okta and ADFS.
Hosting, infrastructure and testing
Blueprint Cloud provides a monthly 99.5% uptime SLA. Support response times and terms are on the Support page.
Data centers
Operated by Rackspace, with SOC 2 Type II and ISO 27001 certifications.
Infrastructure security
Security updates applied to servers monthly. Intrusion detection and prevention (IDS/IPS) at both host and network levels, with security events logged to a SIEM for 24/7 monitoring.
Data residency
Customer data is hosted in the United States on a private cloud dedicated to Blueprint and not shared with other businesses.
Primary: Rackspace, Elk Grove, IL.
Backup: Rackspace, Richardson, TX.
GDPR
Blueprint adheres to the GDPR. Sensitive data detection flags health or payment card data inside an automation without extracting or storing it.
Penetration testing
Independent, full-stack penetration testing on a regular basis.
Security questionnaires, penetration test summaries and our sub-processor list are available on request from security@blueprintsys.com.