trust center
Enterprise Security and Compliance Documentation
BlueFletch delivers robust user and device-level security across frontline devices. Our comprehensive documentation, compliance certifications, and transparent policies provide the security assurance clinical and enterprise teams require for critical frontline operations.
BlueFletch Security and Compliance Framework
enterprise
Security Management Documentation
BlueFletch Enterprise delivers robust user and device-level security designed specifically for frontline devices. Comprehensive documentation covers core components, capabilities, and security functionalities to help organizations understand and implement secure mobile operations.
data privacy
Data Privacy and GDPR Compliance
BlueFletch maintains full compliance with General Data Protection Regulation (GDPR) and is committed to keeping your data private and secure. Our privacy policy and terms of use provide complete transparency about data handling and protection practices.
compliance reporting
SOC 2 and Compliance Certifications
Our SOC 2 Type I report covers internal systems and design controls, demonstrating our commitment to enterprise security standards. The BlueFletch EMS toolset provides compliance tools for collecting data and configuring rules, alerts, and settings for organizational compliance requirements.
healthcare
HIPAA Certification for Healthcare
BlueFletch Healthcare is HIPAA certified, providing healthcare organizations with the specialized compliance and security requirements for protecting patient data across shared mobile devices in clinical environments.
implementation
End User License Agreement (EULA)
The BlueFletch End User License Agreement outlines the terms and conditions for software usage, licensing rights, and legal obligations. This comprehensive agreement covers software deployment, usage rights, and compliance requirements for enterprise implementations.
Third-Party Service Providers (Sub-Processors)
The third-party providers below process personal information on BlueFletch’s behalf in connection with bluefletch.com and our marketing operations. This list is referenced from our Privacy Policy and is updated as our providers change. Last updated: August 26, 2026.
| Provider | Role | Location | Retention |
|---|---|---|---|
| Google (Analytics, Ads, Tag Manager, reCAPTCHA) | Analytics, advertising measurement, tag delivery, fraud prevention | United States (Data Privacy Framework certified) | Analytics data: 14 months |
| Advertising measurement | United States (Data Privacy Framework certified) | Per contract | |
| HubSpot | Marketing, CRM, landing pages | United States (Data Privacy Framework certified) | Per contract |
| Hotjar (Contentsquare) | Behaviour analytics and session recording | Contentsquare group (Data Privacy Framework certified) | Session recordings: 365 days |
| Ahrefs | Search performance measurement (cookieless) | Singapore (Ahrefs Pte. Ltd.) | Per contract |
| ClickPatrol | Advertising click-fraud detection | Utrecht, Netherlands (EEA processing) | Visitor statistics: 6 weeks |
| Cookiebot (Usercentrics) | Consent management and consent records | Denmark (EEA) | Consent records: 12 months |
| YouTube (Google) | Video delivery, only after a visitor clicks play | United States (Data Privacy Framework certified) | Per contract |
| WP Engine | Website hosting | United States | Per contract |
| NitroPack | Site performance and caching | Bulgaria (EEA; a WP Engine company) | Per contract |
| Gravity Forms | Form capture and storage (data stored with our website host) | United States | Form entries: 24 months from submission, then deleted |
| Prighter | Article 27 representation and data subject request handling | Austria / Ireland (EEA) | Per contract |
Experience The BlueFletch Difference
See BlueFletch Solve Your Device Challenges First-Hand, In Your Own Environment.