Is Bolt.new safe for work?
Low risk · 20StackBlitz · Coding · facts (medium-confidence)
Bolt.new is low-risk for default at-work use (20/100): it trains on your data unless you opt out, and holds SOC 2 Type II.
20
Low risk
Watch out: Bolt.new has a real trust center confirming SOC 2 Type 2 and GDPR, and its Enterprise tier adds SSO and dedicated-tenant deployment. ISO 27001, a HIPAA BAA and a locatable subprocessor list are unconfirmed, and training opt-out is only vaguely plan-dependent.
Data and compliance facts
- Trains on consumer-tier data
- Opt-out
- Trains on business-tier data
- No
- Training opt-out available
- Yes
- SOC 2 Type II
- Yes
- ISO 27001
- Unverified
- ISO 42001 (AI management)
- Unverified
- GDPR Data Processing Addendum
- Yes
- HIPAA BAA
- Unverified
- EU data residency
- Unverified
- SSO / SAML
- Yes
- Data retention
- Active accounts retained while active; closed accounts deleted or anonymized within a commercially reasonable period not to exceed thirty days (subject to backups, logs, legal holds).
- Safer tier
- Enterprise (dedicated-tenant deployment, SSO, admin controls)
Why it scores 20 out of 100
- +20Trains on your data. Training is on by default on the consumer tier; you must find and set the opt-out.