Data protection
Encryption
Your data is encrypted both on the move and at rest:
- In transit — all data is encrypted using TLS 1.2+.
- At rest — stored data is encrypted using AES-256.
Combined with auth tokens held in HttpOnly, Secure, SameSite cookies, your information is protected end to end.
Each company is isolated
Bluprint is multi-tenant, but your data isn't pooled with everyone else's. Each company's data lives in its own dedicated database — a hard boundary between organisations, not just a filter on a shared table. One company can never see another's projects, tasks, documents, or people. (See Companies & Workspaces.)
Australian data residency
Bluprint is hosted in Australia on AWS. Your data — including the AI processing done by the Associate — stays within Australia, and isn't sent to third-party AI services. That's a deliberate choice to support Australian data-residency requirements.
Resilient infrastructure
The platform is run to stay available and recoverable:
- Redundant backups so data can be restored.
- DDoS protection against availability attacks.
- Automated vulnerability scanning to catch issues early.
Your data stays yours
Between per-company isolation, encryption, and Australian residency, your information stays private to your organisation and inside the country — whether it's you or the Associate working with it.
Next
Last updated: 2026-05-31
.png)