CodeYourCompliance icon
Trust Signal Directory by CodeYourCompliance

Company profile

bolt.new / StackBlitz

bolt.new has a strong enterprise trust surface, but public SOC2 wording differs between Trust profile and enterprise page. This should be treated as a candidate signal and public claim conflict, not as confirmed SOC2 Type II baseline until verified.

Category DevTools / AI app builder and web IDE
Evidence status Public evidence review in progress
Last checked 2026-06-27

Baseline

Company name
bolt.new / StackBlitz
Category
DevTools / AI app builder and web IDE
Evidence status
Public evidence review in progress
Current maturity stage
fast-moving enterprise trust surface
Last checked
2026-06-27

Observed evidence

Compliance and security claims observed

SOC 2 Type 1; GDPR; CCPA in Trust profile; enterprise page claims SOC 2 Type 2 compliant / SOC2-ready language; status needs reconciliation

Enterprise features observed

SSO; granular admin controls; BYOK deployment into customer AWS/Azure; private tenant/no shared compute claims; browser-level isolation; enterprise support

Interpretation

Observed evidence gap

SOC2 wording conflict; DPA and subprocessor surfaces not observed publicly in this pass

Structured conclusion

bolt.new has a strong enterprise trust surface, but public SOC2 wording differs between Trust profile and enterprise page. This should be treated as a candidate signal and public claim conflict, not as confirmed SOC2 Type II baseline until verified.

Caution

False-positive note

Do not publish a clean SOC2 Type II claim without reconciling source conflict.