Data protection
Encryption
Your data is encrypted both on the move and at rest:
- In transit — all data is encrypted using TLS 1.2+.
- At rest — stored data is encrypted using AES-256.
Combined with auth tokens held in HttpOnly, Secure, SameSite cookies, your information is protected end to end.
Each company is isolated
Bluprint is multi-tenant, but your data isn't pooled with everyone else's. Each company's data lives in its own dedicated database — a hard boundary between organisations, not just a filter on a shared table. One company can never see another's projects, tasks, documents, or people. (See Companies & Workspaces.)
Australian data residency
Bluprint is hosted in Australia on AWS. Your data — including the AI processing done by the Associate on Alesko Std — stays within Australia. That's a deliberate choice to support Australian data-residency requirements.¹
Alesko Max is the exception: it's powered by Anthropic, so prompts you send with Max may be processed outside Australia. The model picker says so before you choose it, and Alesko Std remains fully onshore. We're in open beta — over time we plan to host models ourselves and bring Max onshore too.
¹ During open beta, application logs and error traces are processed by Pydantic Logfire, a third-party observability service whose servers may be located outside Australia.
Resilient infrastructure
The platform is run to stay available and recoverable:
- Redundant backups so data can be restored.
- DDoS protection against availability attacks.
- Automated vulnerability scanning to catch issues early.
Your data stays yours
Between per-company isolation, encryption, and Australian residency, your information stays private to your organisation and inside the country — whether it's you or the Associate working with it.
Next
Last updated: 2026-09-30