Company profile
Trust Center, Security, AI Data Usage, and Privacy Evidence
bolt.new / StackBlitz has an enterprise-facing public trust surface. Reviewed public sources contain SOC 2-related language with differing levels of specificity, so report scope and current audit status should be verified before relying on it.
| Evidence surface | Observed public source | What it means | What not to infer |
|---|---|---|---|
| Trust Center | Observed public Trust Center or trust portal | Buyer assurance surface | Not proof of current buying intent or security quality |
| Security | Observed security page or security documentation | Security review surface | Not implementation verification |
| AI data usage | Observed AI policy, data usage language, or product documentation | Model-training and data-handling review relevance | Not implementation verification |
| Privacy | Observed privacy policy or privacy documentation | Privacy review surface | Not legal compliance determination |
Evidence lookup
These rows summarize reviewed public evidence fields for each company profile. They show observed and not-promoted surfaces without making security, compliance, or buying-intent conclusions.
| Evidence surface | Review status | Observed public source | What it means | What not to infer |
|---|---|---|---|---|
| Trust Center | Observed during review | Source URL observed | Customer-assurance surface | Not proof of trust maturity, security quality, certification, or buying intent |
| Security | Observed during review | Source URL observed | Security review surface | Not implementation verification or control operating effectiveness |
| Privacy | Observed during review | Source URL observed | Privacy review surface | Not legal compliance determination |
| Terms / Legal | Not observed during review | No standalone public source promoted in this review | Contract and legal review surface | Not legal sufficiency or compliance determination |
| DPA | Not observed during review | No standalone public source promoted in this review | Data processing legal review surface | Not GDPR compliance proof |
| Subprocessors | Not observed during review | No standalone public source promoted in this review | Vendor and data-flow review surface | Verify the live list before relying on it |
| Certification / compliance claim review | Observed during review | Observed field without standalone URL in this profile | Assurance packaging or public claim review surface | Not independent audit validation or current certification proof |
| AI policy / data usage | Observed during review | Source URL observed | Model-training and data-handling review relevance | Not implementation verification or model-risk conclusion |
| Enterprise-readiness evidence | Observed during review | Observed field without standalone URL in this profile | Enterprise-readiness surface | Not a complete control assessment or enterprise suitability judgment |
Evidence detail
bolt.new / StackBlitz's reviewed public evidence includes trust, security, or compliance-related surfaces where observed. These may include security pages, compliance claims, security reports, customer-assurance references, or a Trust Center only when one is observed. Treat this as public evidence of trust packaging, not as independent verification of security quality or compliance status.
bolt.new / StackBlitz's reviewed public evidence includes privacy or data-usage surfaces where observed. For AI products, these surfaces may be relevant to customer data handling, model-training language, retention, deletion, or buyer review questions. This profile does not independently verify legal compliance or technical implementation.
bolt.new / StackBlitz's reviewed public evidence includes enterprise-readiness surfaces where observed, such as SSO, SCIM, RBAC, audit logs, data residency, admin controls, report request workflows, or enterprise security references. This is public evidence context, not a complete control assessment.
Do not infer that bolt.new / StackBlitz is currently buying compliance, security, privacy, trust center, questionnaire automation, or AI governance tooling. Do not infer that unobserved evidence is absent. Do not treat this profile as a legal opinion, vendor-risk decision, compliance certification, security ranking, or proof that implementation matches public documentation.
Baseline
Evidence status
SOC-related public claim observed; report scope and current status require verification
SSO; granular admin controls; BYOK deployment into customer AWS/Azure; private tenant/no shared compute claims; browser-level isolation; enterprise support
Evidence surfaces
Interpretation
SOC 2-related public language requires source-scope verification; DPA and subprocessor surfaces were not observed as standalone public pages during review.
bolt.new / StackBlitz has an enterprise-facing public trust surface. Reviewed public sources contain SOC 2-related language with differing levels of specificity, so report scope and current audit status should be verified before relying on it.
Caution
Do not treat SOC 2-related public language as independent confirmation of live report scope or current audit status.
Sources
