Privacy Policy | BlackShield

Operational privacy posture

Privacy controls backed by infrastructure code, tenant isolation, and managed-cloud safeguards.

BlackShield is not treating privacy as a static notice page. The service is deployed on AWS managed infrastructure, operated by an Irish company, and reinforced by code-level controls for tenant scoping, hashed credentials, access governance, auditability, and secure transport.

Effective date

March 18, 2026

Last updated

March 18, 2026

Primary hosting model

AWS managed services in us-east-1

The hosted BlackShield control plane is delivered on AWS us-east-1 with dedicated sovereign European regional storage partitions in eu-west-1 and ap-south-1 and us-west-1 and ap-southeast-2 and ca-central-1 and sa-east-1 and eu-central-1 and us-east-2 and us-west-2 and eu-west-2 and eu-west-3 and eu-north-1 and ap-southeast-1 and ap-northeast-1 and ap-northeast-2 and ap-northeast-3 ensuring regional data residency.

Network placement

Isolated data subnets & in-VPC sensors

Stateful SQLite database partitions are isolated on private S3 storage, while multi-cloud network sensors inspect traffic within customer VPCs with zero raw payload egress.

Data access model

Tenant-scoped by design

Application code resolves tenant context from authenticated identity and uses tenant scoping controls to prevent cross-tenant access.

Credential handling

Secrets are generated, hashed, or vaulted

Environment secrets are stored in Secrets Manager, API keys are stored as SHA-256 hashes, and user passwords are hashed with bcrypt.

What data BlackShield processes

BlackShield is a B2B security platform, so the data we process is oriented around account access, tenant configuration, scanner output, reporting, and operational reliability rather than consumer profiling.

Account and identity data includes user email, display information, role assignment, and authentication-provider metadata needed to manage access.
Tenant data includes company identifiers, API key metadata, feature configuration, audit context, and settings used to operate a tenant workspace.
Security operations data includes findings, affected assets, remediation context, repository or cloud metadata, and operational telemetry needed to deliver the service.
Public-site Google Analytics measurement is consent-managed through a region-scoped banner and Google consent mode rather than enabled by default everywhere.

Infrastructure safeguards built into the platform

The privacy baseline is not just policy language. It is reflected in the infrastructure code that provisions how data stores, queues, secrets, and traffic are handled.

Tenant databases are provisioned as tenant-partitioned SQLite data stores on Amazon S3 with AES-256 SSE-S3 encryption at rest, generated database credentials in AWS Secrets Manager, and backup retention defined in infrastructure configuration rather than left implicit.
The reports bucket is encrypted with S3-managed encryption, blocks all public access, enforces SSL, and applies lifecycle expiration rules to age out old report objects.
The ingestion transport uses encrypted SQS queues with a dead-letter queue so ingestion traffic can be retried and contained without silently disappearing.
The VPC layout keeps stateful services in isolated subnets, while customer-facing traffic is routed through a managed load balancer with HTTPS when certificate wiring is enabled.

Application-layer privacy controls in source code

Privacy protection also depends on application behavior. The backend includes explicit code paths for tenant isolation, secret handling, role checks, and auditability.

Tenant context is resolved from authenticated users or API keys, and request handling carries a company_id context so data access is scoped to the active tenant.
Raw API keys are shown once and stored as SHA-256 hashes; user passwords are stored with bcrypt rather than in reversible form.
Role- and permission-based checks are enforced on sensitive routes such as reports, API keys, notifications, billing, and tenant-rights operations.
Audit trails are recorded for authentication activity, identity changes, remediation workflows, platform-admin actions, and support impersonation sessions.
AI Gateway routes model inference to customer-selected upstream providers (OpenAI, Anthropic, Azure OpenAI, Google, Groq, Mistral) under customer BYOK credentials, applying in-line Go regex guardrails, tool-call schema validation, and secret redaction with zero training on customer data.
Security headers are applied on responses, including HSTS in staging and production, frame denial, referrer controls, and a restrictive permissions policy.

Retention, deletion, and lifecycle handling

Data lifecycle is treated as an operational process, not a vague promise. Retention and deletion controls are tied to environment settings, lifecycle rules, and tenant offboarding flows.

Database backup retention and log retention are defined in environment configuration, making retention posture explicit in infrastructure code.
Report artifacts in S3 follow lifecycle expiration rules, and tenant data export or delete workflows are supported through documented tenant-rights flows.
Deletion and offboarding remain subject to backup windows, legal obligations, and contractual commitments that may apply to the customer relationship.

AWS provider assurance and certification context

BlackShield is built on AWS because it provides a mature managed-cloud baseline with broad security engineering investment and extensive third-party assurance programs.

AWS publicly maintains a large portfolio of compliance and certification programs for the underlying cloud infrastructure used by managed services such as compute, storage, databases, and networking.
Those infrastructure-level attestations strengthen the physical, environmental, and foundational cloud controls on which the service depends.
They do not automatically certify BlackShield itself, which is why we also rely on our own application-layer controls, tenant isolation, logging, access controls, and customer contracting artifacts.

Cross-border data handling and customer review

BlackShield is operated from Ireland. While the primary SaaS control plane is hosted in the United States (us-east-1), European tenants can select dedicated regional storage partitions in eu-west-1 and ap-south-1 and us-west-1 and ap-southeast-2 and ca-central-1 and sa-east-1 and eu-central-1 and us-east-2 and us-west-2 and eu-west-2 and eu-west-3 and eu-north-1 and ap-southeast-1 and ap-northeast-1 and ap-northeast-2 and ap-northeast-3 where findings, triage state, and audit logs remain stored within the European Union.

Customers selecting US-hosted storage from the EEA, UK, or Switzerland are protected by the EU-US Data Privacy Framework and Standard Contractual Clauses (SCCs) embedded in our Data Processing Addendum.
European tenants selecting EU regional storage partitions enjoy full data residency where tenant databases and raw scan bundles never replicate across borders.
Multi-cloud network sensors inspect packets within customer-owned AWS, GCP, and Azure environments, emitting only normalized metadata telemetry with zero raw packet egress.
If a customer requires additional regional, contractual, or subprocessor review, those requirements should be captured before launch rather than after data has begun to flow.
The privacy page complements, but does not replace, signed legal documents, trust documentation, and customer-specific data-processing commitments.

Authorized Subprocessors

The following third-party infrastructure and platform providers are engaged by BlackShield to deliver cloud hosting, telemetry storage, billing, transactional email, customer support, AI Gateway inference proxies (BYOK), and incident notification integrations under strict data processing addenda.

Subprocessor	Category	Role	Location	Data Processed	Safeguards
Amazon Web Services, Inc.	Core Platform	Cloud Infrastructure & Managed Platform Services	United States (with regional storage partitions in EU, US, CA, AP)	Tenant databases, findings, raw scan bundles, audit trails, and encrypted application secrets	EU-US Data Privacy Framework, AWS GDPR Data Processing Addendum, and Standard Contractual Clauses (SCCs)
Stripe, Inc.	Core Platform	Billing & Payment Processing	United States	Customer company name, admin email, subscription plan, billing address, and payment transaction metadata	Standard Contractual Clauses (SCCs) and PCI-DSS Level 1 certification
Resend, Inc.	Core Platform	Transactional Authentication & System Emails	United States	User email addresses, verification links, password reset tokens, and team invitation notifications	Standard Contractual Clauses (SCCs) and Data Processing Addendum
Google LLC	Core Platform	Web Analytics & Consent Measurement	United States	Aggregated website traffic and interaction metrics (strictly governed by Google Consent Mode v2 and user cookie consent)	EU-US Data Privacy Framework and Google Data Processing Terms
Slack Technologies, LLC (Salesforce)	Core Platform	Customer Support & Async Operator Coordination	United States	Support inquiries, incident troubleshooting context, and optional customer-configured finding alert sync	Standard Contractual Clauses (SCCs) and Salesforce Data Processing Addendum
OpenAI, LLC	AI Gateway (BYOK)	AI Gateway Inference Provider (Customer BYOK)	United States	Prompt payloads, completion tokens, and MCP tool schemas proxied via AI Gateway under customer API credentials (zero training on customer data)	Standard Contractual Clauses (SCCs) and OpenAI Business Data Processing Agreement
Anthropic, PBC	AI Gateway (BYOK)	AI Gateway Inference Provider (Customer BYOK)	United States	Prompt messages, tool invocation responses, and completion tokens proxied via AI Gateway under customer API credentials (zero training on customer data)	Standard Contractual Clauses (SCCs) and Anthropic Commercial Terms of Service
Microsoft Corporation (Azure OpenAI)	AI Gateway (BYOK)	AI Gateway Enterprise LLM Provider (Customer BYOK)	United States & European Union (customer-designated Azure regions)	Enterprise chat completions, embeddings, and tool schemas proxied to tenant-owned Azure OpenAI endpoints	Microsoft Products and Services Data Protection Addendum (DPA) and EU Model Clauses
Google LLC (Google AI Studio / Gemini API)	AI Gateway (BYOK)	AI Gateway Inference Provider (Customer BYOK)	United States	Prompt messages, tool calling parameters, and Gemini model responses proxied under customer API credentials	Google Cloud Data Processing Addendum and Standard Contractual Clauses (SCCs)
Groq, Inc.	AI Gateway (BYOK)	AI Gateway Low-Latency Inference (Customer BYOK)	United States	Inference prompts and token streams for low-latency LPU model execution proxied under customer API credentials	Standard Contractual Clauses (SCCs) and Groq Enterprise Data Protection Terms
Mistral AI	AI Gateway (BYOK)	AI Gateway European LLM Provider (Customer BYOK)	France / European Union	Prompt tokens and chat completions proxied to Mistral AI endpoints under customer API credentials with European data residency	EU GDPR direct application (headquartered in France) and Mistral Data Processing Agreement
Atlassian Pty Ltd (Jira)	Customer Integration	Issue Tracking & Finding Remediation Sync (Customer-Configured)	United States / Australia	Security finding titles, severity ratings, remediation tickets, and status synchronization when configured by tenant administrator	Standard Contractual Clauses (SCCs) and Atlassian Customer Data Processing Addendum
GitHub, Inc. (Microsoft)	Customer Integration	Issue Tracking & CI Finding Sync (Customer-Configured)	United States	Security finding descriptions, repository references, and issue tracker comments when configured by tenant administrator	Standard Contractual Clauses (SCCs) and GitHub Data Protection Agreement
Microsoft Corporation (Microsoft Teams)	Customer Integration	Incident Alerting & Channel Notifications (Customer-Configured)	United States & European Union	Finding summary alerts and remediation links dispatched to customer-configured incoming webhook endpoints	Microsoft Products and Services Data Protection Addendum (DPA) and EU Model Clauses