Folioblaze
Start Free
Back to Home
Infrastructure & Compliance

Security & GDPR Compliance

Folioblaze is built from the ground up to protect user data, respect European privacy standards, and ensure your portfolio is delivered securely worldwide.

TLS 1.3 & HSTS

All HTTP requests are strictly upgraded and encrypted in transit.

AES-256 at Rest

Databases, backups, and media files are encrypted at rest with managed keys.

Edge DDoS Mitigation

Global Anycast routing with automated Layer 3/4/7 volumetric attack defense.

SOC-2 Aligned

Hosted on Tier-IV data centers with physical and cryptographic separation.

1. Edge Architecture & Resilience

Folioblaze leverages a globally distributed edge compute architecture. Public portfolios and blogs are server-rendered and distributed across edge nodes worldwide. This architecture shields our core origin databases from direct exposure and delivers sub-second response times for visitors regardless of geography.

2. GDPR (EU General Data Protection Regulation) Compliance

Folioblaze fully complies with the European Union General Data Protection Regulation (Regulation (EU) 2016/679). As both a Data Controller (for account holders) and a Data Processor (for visitor inquiries submitted through user portfolios), we guarantee:

  • Data Minimization: We only collect information strictly required to authenticate creators, host portfolios, and forward inquiries.
  • Right to Access & Rectification: Creators have full programmatic and visual access to modify or export their data at any time.
  • Right to Erasure: Deleting an account initiates a cryptographic purge of all associated records across primary databases within 30 days.
  • Standard Contractual Clauses (SCCs): When data is processed internationally, we rely on European Commission approved SCCs to guarantee legal protection.

3. AI Safety and Data Isolation

Folioblaze provides an interactive AI profile chatbot. To protect creator intellectual property and prevent data leakage:

  • Zero Foundation Training: User drafts, private unlisted blogs, and private messages are strictly excluded from AI training sets.
  • Isolated Retrieval Scope: The chatbot only accesses your public profile data to answer incoming questions.
  • Automated Prompt Sanitization: Recruiter chat queries are filtered for injection attacks and malicious payload extraction.

4. Responsible Vulnerability Disclosure

We welcome reports from ethical security researchers. If you discover a vulnerability or security flaw within the Folioblaze platform, please disclose it to our security team before publishing publicly:

security@folioblaze.app

Please include reproducible steps, request/response headers, and proof-of-concept payloads. We commit to acknowledging valid security reports within 24 hours.