Protecting customer information and user privacy is a core priority at BlogIn. BlogIn is designed as a private, cloud-based internal communication platform, and we use technical and organizational safeguards to protect the confidentiality, integrity, and availability of customer data.
Hosting and Infrastructure
BlogIn is hosted on Amazon Web Services (AWS) in the EU (Ireland) region.
Our application infrastructure uses AWS services including EC2, RDS, and S3. Customer data is stored in a database hosted within an AWS Virtual Private Cloud (VPC), with network access restricted through security group rules.
Uploaded files are stored in private Amazon S3 storage and are not publicly accessible.
AWS maintains a broad portfolio of security and compliance certifications and reports. These certifications apply to AWS infrastructure and do not imply that BlogIn itself holds the same certifications.
More information:
Encryption
BlogIn uses TLS encryption for data transmitted between users and the service.
Customer data stored in our databases and file storage is encrypted at rest using AWS-managed encryption (AES-256).
Passwords are not stored in plaintext. User passwords are securely hashed before being stored.
Data Access and Isolation
Each customer's data is logically separated from other customers' data.
Application-level authorization controls ensure that users can access only the BlogIn account and content they are authorized to access.
Access to production customer data by BlogIn personnel is restricted to authorized senior technical personnel and is performed only when necessary for support, maintenance, security, or legal obligations.
We do not routinely access or review customer content.
Authentication and Access Control
BlogIn supports several authentication methods, including:
- Email and password
- Google sign-in
- Slack sign-in
- SAML 2.0 Single Sign-On (SSO)
BlogIn can integrate with SAML 2.0 identity providers such as Okta, Microsoft Entra ID, Google Workspace, and OneLogin.
BlogIn also supports SCIM 2.0 user provisioning, allowing customers to automate user creation, updates, deactivation, and group-based provisioning through supported identity providers.
More information:
Backups and Recovery
BlogIn performs automated daily backups of customer data.
Backups are maintained as part of our operational processes to support recovery in the event of infrastructure failure or data loss.
Security Maintenance
We regularly maintain and update the BlogIn application and its underlying infrastructure.
Security updates and patches are applied as part of our ongoing platform maintenance, and access to production infrastructure is restricted to authorized technical personnel.
Privacy and Data Processing
BlogIn processes customer data to provide, operate, maintain, and secure the service, as described in our Privacy Policy.
More information is available in our:
Subprocessors
BlogIn uses a limited number of third-party service providers to operate the service.
A current list of subprocessors is available here:
Security Questions and Responsible Disclosure
For security questions, vendor security reviews, or to report a suspected vulnerability, please contact us at: