运行期隐私与合规态势
以基础设施即代码（IaC）、租户硬隔离与受管云安全屏障为后盾的隐私控制体系。
BlackShield 不把隐私政策当作静态文案。本服务依托 AWS 受管云架构，由爱尔兰公司运营，并在代码层级深度落实多租户隔离、凭据单向哈希、访问权限治理、详尽审计轨迹与全链路传输加密。
生效日期
2026年3月18日
最近更新
2026年3月18日
主托管基础设施模型
AWS 受管云服务（us-east-1）
BlackShield 生产控制平面部署于 AWS us-east-1，并在 eu-west-1 与 ap-south-1 与 us-west-1 与 ap-southeast-2 与 ca-central-1 与 sa-east-1 与 eu-central-1 与 us-east-2 与 us-west-2 与 eu-west-2 与 eu-west-3 与 eu-north-1 与 ap-southeast-1 与 ap-northeast-1 与 ap-northeast-2 与 ap-northeast-3 提供独立的欧洲主权存储分区以确保数据本地合规驻留。
隔离网络部署形态
私有隔离子网与 VPC 内部探测器
SQLite 租户数据库物理隔离存储于受管私有 S3 之上，流量检测探针在客户 VPC 内运行且绝无原始报文外溢。
数据访问隔离机制
架构原生租户级隔离
应用层从已验证身份鉴权令牌直接推导租户上下文，杜绝任何跨租户越权访问的可能性。
敏感凭据防护规范
凭据全量密文托管、单向哈希或自动轮换
环境变量安全存储于 Secrets Manager，API 密钥强制以 SHA-256 密文哈希存储，密码使用强加盐 bcrypt。
我们处理的数据
平台仅处理提供 B2B 服务所必需的账户信息、租户配置、扫描结果和运营遥测数据。
- 账户数据: 用户电子邮件、RBAC 角色分配及认证元数据。
- 安全数据: 漏洞发现、受影响资产清单及修复上下文。
- 运营遥测: 审计日志及系统性能运行指标。
数据处理目的
数据仅用于交付、保障和改进约定的安全功能，绝不用于任何商业广告或画像目的。
- 生成高管安全态势看板和合规报告。
- 通过异常检测维护平台系统完整性与租户隔离。
- 提供客户技术支持并快速处理故障事件。
基础设施防护机制
基础设施通过 Amazon S3 上的租户分区 SQLite 存储、AES-256 加密、VPC 隔离和 mTLS 保护。
- 租户数据隔离在加密的私有 S3 存储桶中，杜绝跨租户泄露。
- 租户配置及权限变更记录不可篡改的审计追踪日志。
- 提供欧洲主权区域存储分区，满足 GDPR 数据驻留合规要求。
合规授权第三方子处理者
BlackShield 在严格的数据处理补充协议（DPA）约束下，指定以下第三方云基础设施与平台服务商，用于支持云端托管、遥测存储、账单结算、事务邮件发送及应急告警集成。
| 子处理者名称 | 业务类别 | 服务职责 | 部署地域 | 处理的数据类型 | 跨境安全保障措施 |
|---|---|---|---|---|---|
| Amazon Web Services, Inc. | 核心平台底座 | Cloud Infrastructure & Managed Platform Services | United States (with regional storage partitions in EU, US, CA, AP) | Tenant databases, findings, raw scan bundles, audit trails, and encrypted application secrets | EU-US Data Privacy Framework, AWS GDPR Data Processing Addendum, and Standard Contractual Clauses (SCCs) |
| Stripe, Inc. | 核心平台底座 | Billing & Payment Processing | United States | Customer company name, admin email, subscription plan, billing address, and payment transaction metadata | Standard Contractual Clauses (SCCs) and PCI-DSS Level 1 certification |
| Resend, Inc. | 核心平台底座 | Transactional Authentication & System Emails | United States | User email addresses, verification links, password reset tokens, and team invitation notifications | Standard Contractual Clauses (SCCs) and Data Processing Addendum |
| Google LLC | 核心平台底座 | Web Analytics & Consent Measurement | United States | Aggregated website traffic and interaction metrics (strictly governed by Google Consent Mode v2 and user cookie consent) | EU-US Data Privacy Framework and Google Data Processing Terms |
| Slack Technologies, LLC (Salesforce) | 核心平台底座 | Customer Support & Async Operator Coordination | United States | Support inquiries, incident troubleshooting context, and optional customer-configured finding alert sync | Standard Contractual Clauses (SCCs) and Salesforce Data Processing Addendum |
| OpenAI, LLC | AI 网关 (BYOK) | AI Gateway Inference Provider (Customer BYOK) | United States | Prompt payloads, completion tokens, and MCP tool schemas proxied via AI Gateway under customer API credentials (zero training on customer data) | Standard Contractual Clauses (SCCs) and OpenAI Business Data Processing Agreement |
| Anthropic, PBC | AI 网关 (BYOK) | AI Gateway Inference Provider (Customer BYOK) | United States | Prompt messages, tool invocation responses, and completion tokens proxied via AI Gateway under customer API credentials (zero training on customer data) | Standard Contractual Clauses (SCCs) and Anthropic Commercial Terms of Service |
| Microsoft Corporation (Azure OpenAI) | AI 网关 (BYOK) | AI Gateway Enterprise LLM Provider (Customer BYOK) | United States & European Union (customer-designated Azure regions) | Enterprise chat completions, embeddings, and tool schemas proxied to tenant-owned Azure OpenAI endpoints | Microsoft Products and Services Data Protection Addendum (DPA) and EU Model Clauses |
| Google LLC (Google AI Studio / Gemini API) | AI 网关 (BYOK) | AI Gateway Inference Provider (Customer BYOK) | United States | Prompt messages, tool calling parameters, and Gemini model responses proxied under customer API credentials | Google Cloud Data Processing Addendum and Standard Contractual Clauses (SCCs) |
| Groq, Inc. | AI 网关 (BYOK) | AI Gateway Low-Latency Inference (Customer BYOK) | United States | Inference prompts and token streams for low-latency LPU model execution proxied under customer API credentials | Standard Contractual Clauses (SCCs) and Groq Enterprise Data Protection Terms |
| Mistral AI | AI 网关 (BYOK) | AI Gateway European LLM Provider (Customer BYOK) | France / European Union | Prompt tokens and chat completions proxied to Mistral AI endpoints under customer API credentials with European data residency | EU GDPR direct application (headquartered in France) and Mistral Data Processing Agreement |
| Atlassian Pty Ltd (Jira) | 客户生态集成 | Issue Tracking & Finding Remediation Sync (Customer-Configured) | United States / Australia | Security finding titles, severity ratings, remediation tickets, and status synchronization when configured by tenant administrator | Standard Contractual Clauses (SCCs) and Atlassian Customer Data Processing Addendum |
| GitHub, Inc. (Microsoft) | 客户生态集成 | Issue Tracking & CI Finding Sync (Customer-Configured) | United States | Security finding descriptions, repository references, and issue tracker comments when configured by tenant administrator | Standard Contractual Clauses (SCCs) and GitHub Data Protection Agreement |
| Microsoft Corporation (Microsoft Teams) | 客户生态集成 | Incident Alerting & Channel Notifications (Customer-Configured) | United States & European Union | Finding summary alerts and remediation links dispatched to customer-configured incoming webhook endpoints | Microsoft Products and Services Data Protection Addendum (DPA) and EU Model Clauses |