Your roster’s data, locked down
A creator’s deal value, a brand’s terms, and your commission rates are the most sensitive things you hold. Here is how bluo keeps them safe.
Role-based access
Owners, managers, and finance each see only what their role needs. Permissions are enforced on every request, not just hidden in the UI.
Talent portal isolation
Creators get a separate surface that shows their own deals and cut, and never exposes agency-wide numbers, other creators, or brand terms.
Activity log
Every change to a deal, rate, or invoice is recorded and attributable to the person who made it, so nothing changes without a trail.
Encrypted at rest
Your data is encrypted in storage on managed cloud infrastructure, so a stolen disk is unreadable.
Encrypted in transit
Every connection to bluo runs over TLS, so data is encrypted between your browser and our servers.
Managed infrastructure
We run on hardened, industry-standard cloud providers that handle patching, backups, and network isolation for us.
How we handle your data
We treat the data you and your creators give us as yours. For the full detail, read our Privacy Policy.
We collect what the product needs
Roster, deals, brand contacts, media kits, reports, invoices, and the social analytics creators choose to connect. Nothing speculative.
Social data powers analytics, nothing else
Data we receive from Instagram, Facebook, and other platforms is used only to present accurate creator analytics inside your agency. It is never sold or shared with advertisers.
You can delete it
Creators can disconnect a social account at any time, and you can request deletion of your account data. See the data deletion page for how.
Built on secure foundations
We build on hardened, industry-standard cloud infrastructure so the heavy lifting of security is handled by providers who specialize in it.
Hardened cloud providers
We host on established, industry-standard cloud infrastructure trusted by thousands of companies, so physical security and network isolation are handled by teams who do only that.
Patching and backups, handled
Our providers keep the underlying systems patched and back up your data automatically, so a bad day for a server is not a bad day for your agency.
Encryption end to end
Data is encrypted in transit over TLS and at rest in storage, across every part of the stack.
Found something? Tell us
If you believe you have found a security vulnerability in bluo, we want to hear from you. Email us with the details and steps to reproduce, and we will investigate and respond. Please give us a reasonable window to fix the issue before disclosing it publicly.