Security
How your financial data is handled
Your model is your business laid out in numbers, so this page states plainly whatbluprnts stores, how it is protected, who can reach it, and how to get it back or delete it. It describes what is true of the product today — not a roadmap, and not a compliance claim we have not earned.
What data bluprnts holds
Three things, and it is worth separating them because they are protected differently.
- Your model. The forecast itself: your products and prices, sales, employees and their salaries, costs, financing, projects, scenarios and reports, plus the model settings behind them such as opening balances, payment terms and tax treatment.
- Your company record. Business name, address, industry, logo and brand colour, and which user accounts have access to it.
- Your account. Name, email and subscription status.
What we do not hold is worth stating as plainly:
- No card details. Payments run through Stripe and card data stays with Stripe. It never reaches our servers.
- No password. Authentication is handled by Auth0, so there is no password of yours in our database to lose.
- No bank connection. bluprnts has no open banking link and does not read your bank account.
- No invoice or transaction-level accounting data, even if you connect Xero. See below.
Encryption and storage
Traffic between your browser and bluprnts is encrypted in transit over HTTPS. Every request to the application programming interface behind the app carries an access token issued by Auth0 and is rejected without one.
Storage-at-rest, hosting provider and data region are deliberately not stated here yet. They are true facts we have not published, not facts we are hiding: the same placeholders sit on the sub-processors page, which is the legal document that has to name them. Both get filled in together, from the infrastructure rather than from an assumption. If you need the answer before then, ask us and you will get it directly.
Who can access your model
Access is granted per company. A forecast is reachable only by the user accounts attached to that company record, and every request is checked against the signed-in account rather than against a shared link or a guessable identifier.
Reports are the one deliberate exception, because their whole purpose is to be read by somebody outside the business. A shared report link opens that document and nothing else: it does not grant access to the model behind it, to any other report, or to your account. Exporting to PDF instead keeps the document entirely in your hands.
Internally, access to production data is limited to the people who need it to operate and support the service. We are a small team and we would rather say that plainly than imply a formal access-control programme we have not built yet.
What the Xero connection can do
Nothing, unless you connect it. It is optional, and a full forecast can be built without it.
If you do connect it, the permissions requested are read permissions only.bluprnts cannot create, change or delete anything in your Xero organisation, and it never writes back to your books.
What it can read is report-level and nothing beyond it:
- Your organisation settings
- Profit and loss
- Balance sheet
- Trial balance
- Aged receivables and payables
Not your invoices, bills, contacts or bank transactions. There is also no background sync: data is pulled when you ask for it, never on a schedule you have forgotten about.
Disconnecting revokes the token with Xero, after whichbluprnts can read nothing at all. Your forecast is unaffected, because it was never built out of the accounting data.More on the Xero integration →
What the AI features send, and what they do not
The AI assistant and the written narrative in reports are powered by Anthropic, listed onour sub-processors page. Content you submit to those features is processed there. If you never use them, nothing is sent.
No figure in your forecast or in a report is produced by a language model. Every number is computed by the forecasting engine from your own model and traces back to the drivers behind it. The AI writes the words around the numbers. It does not calculate, estimate or round any of them, which is deliberate: a plausible-looking figure that nothing produced is the last thing that should appear in a document you hand to a lender.
Backups and recovery
Your model is stored in a managed database rather than on a single machine, and is not dependent on your browser or device.
Backup frequency, retention period and recovery objectives are not published here yet, for the same reason as the storage section above: they follow from the hosting arrangement, and we will state them once we can state them exactly. Ask and we will tell you what is in place today.
Export and deletion
Getting your work out. Reports export to PDF, which covers the documents you would want to keep. There is no full model export today, and we would rather tell you that on this page than have you discover it later.
Deletion. You can ask us to delete your account and the data associated with it, and we will. Write tosupport@bluprnts.ai. Some records are kept longer where the law requires it, for example billing records for tax purposes.The privacy policy is the formal statement of what is kept and for how long.
After a trial or a cancellation. Ending a subscription stops the billing and closes off access to the paid features. It is not a deletion request, and we do not treat it as one, so if you want the data gone as well, tell us and it will be.
What we are not claiming
bluprnts does not hold SOC 2, ISO 27001 or any equivalent certification today, and we are not going to put a badge on this page implying otherwise. We have not had an independent penetration test published either.
We are a young product handling financial models, and the honest position is that we build on providers who do hold those certifications, for authentication, payments and infrastructure, while being straightforward about what we have not done ourselves. If a certification is a requirement for you, say so, and we will tell you where we actually stand rather than where we would like to.
Model the business. The statements follow.
Free to start. No accounting data required.
Get started7-day free trial · no card