AI Data & Security FAQs

Blocks uses a multi-provider AI architecture and may leverage models from leading providers, including Claude (Anthropic), GPT (OpenAI), and Gemini (Google), depending on the specific use case and product functionality. This approach allows us to optimize for performance, accuracy, reliability, and cost efficiency across different AI-powered features.

Blocks continuously evaluates and updates its AI providers and models to ensure the best possible experience for our users. The most up-to-date list of AI providers and subprocessors is available in the Blocks Subprocessor List: Sub Processor List.

No. Blocks does not use customer data, prompts, responses, files, or content to train AI models. When Blocks uses third-party AI providers, customer data is processed solely to fulfill the requested service and is not used by Blocks for model training purposes.

Blocks maintains logical separation between customer environments and implements tenant isolation controls designed to prevent customer data from being exposed to other customers.

Blocks maintains agreements with its AI providers that restrict the retention and use of customer data and require processing solely for the purpose of fulfilling the specific customer request. Our AI providers may retain data for up to 30 days for abuse monitoring purposes, after which it is deleted. Where available, Blocks utilizes zero-retention or equivalent data protection controls to further minimize the storage of customer data by AI providers.

You retain all rights, title, and interest in the content you submit to Blocks, as well as in the output generated through your use of the platform. Blocks does not claim ownership of your inputs, prompts, data, or AI-generated content. Subject to applicable law and third-party rights, you remain the owner of both the content you provide and the results generated on your behalf.

Blocks follow security protocols ensuring a consistent and robust approach to data protection. Blocks employ robust encryption protocols to protect customer data. Data is encrypted at rest using AES-256 and in transit with TLS 1.2, ensuring it remains secure during storage and transfer. For more details, visit our Trust Center.

Blocks takes a proactive approach to security and compliance through continuous evaluation of its frameworks and certifications to align with global standards and emerging regulations. In addition to holding certifications such as ISO/IEC 27001 and SOC 2, Blocks regularly reviews and expands its compliance portfolio to address new industry and regulatory requirements, including those related to AI governance. For the latest list of certifications and attestations, visit our Trust Center.