Back to Blaise

Privacy Policy

How Blaise collects, uses, and protects your data.

Effective date: 2026-05-17 (Beta)

Blaise is operated by Sekuir Technologies, LLC.

This is a placeholder Privacy Policy for the Blaise beta. A legally-reviewed version will replace this before general availability. By using the beta you acknowledge the terms below as our current best representation of our practices.

What we collect

  • Account data: email, organization name, role.
  • Client data you create: client records, assessments, evidence, risks, decisions, action items, and any documents you upload.
  • Connector data: when you authorize an integration (M365, AWS, Defender, etc.) we pull posture data from those systems.
  • Telemetry: page views, feature usage, error logs. Aggregated and not sold to third parties.

How we use it

To run the service, surface insights, generate executive narratives via Claude (Anthropic), notify users of events, and improve the product. We do not sell your data. AI prompts are processed by Anthropic under their commercial API terms with no training on your inputs.

Where it lives

Data is stored in Supabase (Postgres in AWS us-east-1) with row-level security tenant isolation. Blaise data is processed by Sekuir Technologies, LLC. Email delivery via Resend. AI via Anthropic. We will sign a BAA with Anthropic before any client uses Blaise to process PHI.

Your rights

You can export or delete your organization's data at any time from Settings → Organization → Export / Delete. Deletion is permanent within 30 days. We honor GDPR / CCPA / CPRA data-subject requests within statutory timeframes.

Security

TLS in transit, AES-256 at rest, RLS-enforced tenant isolation, scoped JWT authentication. Security incidents will be communicated within 72 hours of confirmed impact to affected organizations.

Contact

Privacy questions: privacy@sekuirtek.com
Security incidents: security@sekuirtek.com

This placeholder is provided in good faith and represents our intended practices. It is not a substitute for legal review. Until replaced with the GA version, beta participants should treat this as our binding commitment-in-spirit.