Security and privacy at Blazelock

We operate our scanning infrastructure ourselves in the EU. Learn how we review the scan engines we use, secure our platform, and handle your files and data.

  • Data processing in Germany
  • Leading scan engines

Security at a glance

The essentials for protecting your files and data.

  • Operated in the EU: We run our scanning infrastructure ourselves in Frankfurt am Main.

  • Developed in Germany: We develop Blazelock in Germany, with our headquarters in Herford.

  • Reviewed scan engines: We use engines from leading providers and review them continuously.

  • Deletion after the scan: Submitted files are deleted immediately after scanning.

Quality testing of our scan engines

In the Blazelock Security Lab, we evaluate scan engines with our own tests. What matters to us is how reliably they detect threats and how well they perform in operation.

  • Leading scan engines: We use scan engines from leading providers and select them based on our own tests in the Blazelock Security Lab.

  • Isolated tests: In an isolated test environment, we use malware samples to check how reliably the engines detect threats.

  • Millions of test files: We use millions of benign files to check how often the engines trigger false alarms (false positives).

  • Performance in operation: We test the engines for performance, latency, and stability.

  • Ongoing reassessment: We regularly retest the engines we use and evaluate new solutions to continuously improve malware detection.

Security of our platform

We combine several safeguards to protect the transfer of your data, access to our systems, and the operation of our platform.

  • Encryption: Your data is encrypted with TLS 1.2+ in transit and AES-256 at rest.

  • Web Application Firewall: We use a WAF that filters suspicious requests and blocks known attack patterns.

  • Monitoring and updates: We monitor our infrastructure around the clock and keep our systems current with security updates.

  • Access protection: 2FA protects your Blazelock accounts and our internal system access. We store passwords for user accounts only as hashes.

  • Signed webhooks: Our webhook notifications are signed, so their origin and integrity can be checked.

Malware protection you can rely on

  • 1M+

    file analyses per month

  • 99.99%

    platform availability

  • 24/7

    infrastructure monitoring

  • 0

    files stored permanently

European infrastructure and privacy

We operate our scanning infrastructure ourselves within the European Union. We use IONOS CLOUD in Frankfurt am Main, one of Europe's most important internet exchange points.

For file checking, we offer you a Data Processing Agreement. On this basis, we process personal data in accordance with the requirements of the GDPR.

The data center we use at IONOS CLOUD is certified to ISO/IEC 27001. The related security processes and safeguards are regularly reviewed by an independent body.

Learn more about the certifications
3D globe with Germany markedEmblem of the European Union

Helpful links

Transparency and documentation

Frequently asked questions

Your data is encrypted in transit with TLS 1.2+ and at rest with AES-256. We store passwords for user accounts only as hashes.

Yes. We process personal data in accordance with the requirements of the GDPR. For file checking, we offer you a Data Processing Agreement and process the data on that basis. You can find more information in our privacy policy.

We operate our scanning infrastructure ourselves within the European Union. Our scan servers are hosted with IONOS CLOUD in Frankfurt am Main. Your files do not leave our scanning infrastructure and are not passed on to third parties.

No. Your files are used only for the scan you requested and are then deleted. Neither we nor the engine providers use them for testing or to train the scan engines.

We monitor our infrastructure around the clock and keep our systems current with security updates. A web application firewall filters suspicious requests and blocks known attack patterns. We also protect our internal system access with two-factor authentication.

You can delete your user account and the data linked to it at any time in the dashboard. This does not include data we still need because of legal retention requirements or to safeguard legal claims. Submitted files are deleted immediately after the scan.

Still have questions?

Contact us

Protect every upload before it becomes a problem.

We run the scanner infrastructure. Blazelock is straightforward and fast to connect.

Try for freeRequest a demo