Your data stays on your machines. Bleep is built from the ground up with a zero-trust, privacy-first architecture.
All scanning and detection runs entirely on your device. Request content is never sent to Bleep servers or any third party.
Only traffic to AI services is inspected. All other network traffic passes through completely untouched — zero interference with your regular browsing or apps.
We never store, log, or access the content of your requests. Only aggregated metadata (detection counts, types) is recorded for audit purposes.
Understanding exactly what stays local and what touches our cloud.
User / Agent → Bleep Proxy (LOCAL) → AI Service (ChatGPT, Claude, etc.)
All scanning, pattern matching, redaction, and blocking happens here — for browser, IDE, and agent traffic alike.
Content never leaves your machine. Bleep has zero access to it.
Bleep App → Bleep Cloud
License validation, account management, billing (Stripe), web dashboard.
Only metadata: license keys, detection counts, subscription status.
The local proxy uses TLS for MITM inspection of AI traffic, ensuring secure interception and forwarding.
All communication with Bleep cloud (license validation, dashboard) uses TLS 1.3.
Supabase encrypts all stored data with AES-256. Stripe handles payment data under PCI DSS Level 1.
We do not use Google Analytics or any third-party tracking scripts on our website or dashboard.
We rely on a small number of trusted third-party providers for our cloud services. None of them have access to content processed by your local proxy.
Privacy-by-design architecture. On-prem processing means minimal personal data reaches our cloud.
No PHI leaves your environment. Bleep's on-prem design means protected health information stays on your network. BAA available upon request.
On our roadmap for enterprise customers. Our cloud infrastructure providers (Supabase, Vercel, Stripe) are already SOC 2 certified.
Information security management certification on our roadmap as we scale to larger enterprise deployments.
We take security vulnerabilities seriously and appreciate the work of security researchers.
If you discover a security vulnerability in Bleep, please report it responsibly. Email us at security@bleep-it.com with a detailed description of the issue.
We're happy to answer any security or compliance questions.