Core Architectural Moats
Zero-Knowledge End-to-End Encryption (E2EE)
Every response is encrypted client-side using WebCrypto RSA-OAEP 2048-bit key wrapping and AES-256-GCM authenticated bulk encryption. The server stores only public keys and can never decrypt response payloads.
GDPR Article 17 Cryptographic Shredding
Key-per-subject key management guarantees permanent anti-resurrection erasure. Zeroizing the subject's cryptographic key renders historical backup snapshots unrecoverable mathematical noise.
HIPAA 18-ePHI Redaction DLP
High-performance streaming Data Loss Prevention inspects and redacts all 18 HIPAA Safe Harbor identifiers (45 CFR §164.514) before data hits the storage layer.
Whistleblower & Ethics Two-Way Chat
Anonymous survey respondents receive an ephemeral cryptographic proxy token, enabling two-way investigative dialogue without compromising respondent anonymity under EU Directive 2019/1937.
Enterprise Identity (SAML 2.0 & SCIM 2.0)
Native integration with Okta, Microsoft Entra ID, Ping Identity, and OneLogin supporting XML-DSig signature validation and RFC 7644 user lifecycle synchronization.
Transparent Subscription Tiers
Free: $0/month — 3 surveys, 100 responses/survey, standard CSV/JSON export.
Starter: $19/month ($190/year) — 20 surveys, 1,000 responses/survey, client-side E2EE, AI survey generator, custom branding.
Pro: $49/month ($490/year) — 100 surveys, 10,000 monthly responses, HIPAA DLP streaming engine, HMAC immutable audit chains, Webhooks & REST API.
Enterprise: Custom Quote ($1,499+/month) — Unlimited surveys, dedicated MSA, SAML 2.0 SSO, SCIM 2.0 directory sync, Whistleblower hotline suite, and custom SLA.
Frequently Asked Questions
Is my survey data encrypted?
Yes. All traffic uses TLS 1.3 in transit, and survey responses can be encrypted with client-side Zero-Knowledge E2EE where the server never has access to decryption keys.
Do you sell or monetize survey data?
Never. Blindsight operates strictly on a transparent software subscription model. We never sell, track, or share survey data with advertisers or third parties.
Where is survey data hosted?
Data is stored in SOC 2 Type II compliant multi-region infrastructure with dedicated data residency options for enterprise customers.