Services Start free trial
Security and trust

Plain answers for your security questionnaire.

What we do today, stated without inflation. Where something is in progress, we say so.

One sign-in, stronger by default

In place

Trailblazer ID signs you in to Logik, Flux and Console with passkeys or an authenticator app. Google and Microsoft sign-in are built and being switched on.

Tenant isolation, tested

In place

Every organization is isolated, and an end-to-end test suite checks that one organization can never read another’s records.

Roles and approvals

In place

Eight system roles in Logik, cost visibility per role, approval policies for money, and nobody approves their own scrap, rollout or limit change in Flux.

Audit trail

In place

Account activity, access changes and record history in Logik; signed station results in Flux; a hash-chained audit log designed into Console.

Your devices, your AWS account

In pilot

Console is designed so device certificates, the MQTT endpoint, rules and functions live in the customer’s own AWS account. Trailblazer does not hold your fleet.

Your data, always exportable

In place

Whole-organization export at any time, in any subscription state. A lapsed account turns read-only; nothing is deleted.

AI is optional

In place

Every AI feature is opt-in, every workflow completes by hand, and an organization can turn AI off entirely.

Details

Controls by area

Sign-in

  • Trailblazer ID: one sign-in for Logik, Flux and Console
  • Passkeys and authenticator apps (TOTP)
  • Two-factor authentication in Logik
  • Google and Microsoft sign-in: built, being switched on

Access

  • Eight system roles in Logik, with cost visibility per role
  • Approval policies and an approvals inbox for money
  • Access changes and account activity recorded
  • Separation of duties in Flux and Console: no self-approval

Data

  • Tenant isolation covered by end-to-end tests
  • Hosted on AWS in us-east-2 (Ohio) for Logik and Flux
  • Console devices stay in the customer’s AWS account
  • Whole-organization export at any time; read-only, never deleted, after a lapse

Operations

  • Public status page
  • Release checks before every production deploy
  • Encrypted queues and dead-letter queues for device messages (Console)
  • AI features off unless an organization turns them on

We do not hold SOC 2 or ISO 27001 certification today. For a security review, a data processing agreement or our subprocessor list, email support@trailblazercloud.app. Product terms: Terms · Privacy · Status.