Backblaze, Inc..
BLZE.US | Data processing, hosting and related activities
Backblaze, Inc. provides cloud storage services. The company offers cloud storage and online backup solutions for personal and business use. Its services include backing up computer data, storing and accessing data in the cloud, and providing tools for developers to integrate cloud storage into thei...Show More
Better Health for All
0
Backblaze's core business of cloud storage and online backup is generally health-neutral. Therefore, KPIs related to direct health impact, harmful revenue, safety record, price accessibility, vulnerable reach, health innovation investment, health externalities, health equity programs, healthcare workforce support, preventative health measures, global health crisis response, mental health initiatives, pharma patent flexibility, nutrition and food safety, healthcare education, addiction mitigation, and clinical trial ethics are scored as 'Not applicable' or 'Neutral' (0), as the company's operations do not directly intersect with these areas. For risk transparency, Backblaze demonstrates exceptional practices. It is SOC 2 Type 2 compliant, ISO 27001 certified for its data centers, and adheres to GDPR/UK GDPR and CCPA/CPRA.
1
The company offers HIPAA-friendly object storage and will execute Business Associate Agreements (BAAs) with Covered Entities.
2
It encrypts data using AES 128-bit encryption and HTTPS, offers user-specified private encryption keys, and provides server-side encryption.
3
Backblaze implements multi-factor authentication, application keys, access management controls, and object lock immutability.
4
It explicitly states it does not sell personal information to third parties and does not access the content of files, including Protected Health Information (PHI).
5
These measures indicate exceptional transparency and proactive safety communications regarding data-related risks. Similarly, for healthcare data responsibility, Backblaze's practices are exceptional. The company's commitment to HIPAA compliance, willingness to execute BAAs, SOC 2 Type 2 and ISO 27001 certifications, and adherence to global privacy regulations like GDPR/CCPA demonstrate a perfect track record with health data protection.
6
Its robust security features, including encryption, multi-factor authentication, and object lock immutability, further support this.
Fair Money & Economic Opportunity
0
Backblaze, Inc. is a cloud storage and online backup company, not a financial institution. Therefore, most KPIs related to financial products, such as underserved client share, pricing fairness, exploitative fee exposure, inclusion initiatives, fair lending compliance, wealth building outcomes, profit reinvestment, financial literacy initiatives, debt burden ratio, and geographic inclusion, are not applicable and score 0. For data accessibility, the company offers free API calls for B2 Reserve and pay-as-you-go Class A, and the first 2,500 daily calls for Class B and C, with charges thereafter.
1
This aligns with providing fully PSD2/open-banking compliant APIs with no access charges for a score of -30. The company also states it does not sell personal information and adheres to data privacy regulations like GDPR and CCPA/CPRA.
2
Fair Pay & Worker Respect
0
The company has an overall employee rating of 3.3 out of 5 stars based on 78 reviews
1
, which translates to 66% on a 100-point scale. Additionally, 57% of employees would recommend working at the company to a friend, and 66% approve of the CEO.
2
The company was Great Place To Work® Certified in 2023 and 2024.
3
The voluntary employee turnover rate is not explicitly provided, but restructuring charges in 2024 included $3.9 million for severance and benefits related to impacted employees, following $3.616 million in 2023 for similar costs.
4
No regulatory actions, violations, fines, or compliance issues related to labor laws or human rights are mentioned in the provided articles.
5
Fair Trade & Ethical Sourcing
0
No specific, quantitative evidence was found across the provided articles for any of the KPIs related to Fair Trade & Ethical Sourcing. The articles discuss general company information, supply chain management for hard drives,
1
privacy policies,
2
security compliance,
3
and a code of conduct,
4
but do not provide data on fair trade certifications, supplier audit frequency, forced/child labor incidents, supply chain traceability, remediation speed, ethical clause coverage in contracts, materials risk index, or supplier diversity spend.
5
Honest & Fair Business
-20
Backblaze has a formal whistleblower policy that allows anonymous reporting via email or an online form, but there is no evidence provided regarding independent investigation processes, training, or resolution times.
1
The company states it has had zero financial restatements in the past five years, with two recent annual financial statements fully audited and available on SEC EDGAR.
2
The company's financial statements were fully audited, covering approximately 80% of the business, including key subsidiaries.
3
An independent third-party law firm and forensic accounting firm conducted an audit to investigate short seller claims, confirming no wrongdoing, but the extent of this verification for all ethical claims is not specified beyond this specific investigation.
4
Kind to Animals
0
Backblaze, Inc. provides cloud storage services, a digital offering that does not involve animal-derived products, animal testing, animal agriculture, or direct interaction with wildlife habitats.
1
Consequently, all Key Performance Indicators related to the 'Kind to Animals' value are not applicable to the company's core business operations.
No War, No Weapons
0
No specific, quantitative data points relevant to the 'No War, No Weapons' ethical value were found in the provided articles. Information regarding revenue from arms contracts, dual-use technology, sales to embargoed regimes, peacebuilding investment, or any other related metrics is not present. While one article mentions charitable donations and service waivers for Ukrainian customers, it does not provide a proportion of revenue or any other quantitative figure to score against the 'peacebuilding_investment' KPI.
1
Planet-Friendly Business
0
No specific, quantitative evidence was found in the provided articles to score Backblaze against any of the 'Planet-Friendly Business' KPIs. While articles mention Backblaze's commitment to sustainability and its use of a partner's data center (Nautilus)
1
with projected lower carbon footprint
2
and net-zero water consumption
3
, these statements refer to a partner's facility and lack company-wide quantitative data for Backblaze itself. General statements about recycling decommissioned hardware
4
or certifications for a water collection system at a partner's site
5
do not provide the specific metrics required by the rubric for scoring.
Respect for Cultures & Communities
0
No specific, quantitative evidence was found across the provided articles to assess Backblaze (BLZE.US) against any of the KPIs for the 'Respect for Cultures & Communities' value. The articles discuss general topics such as internship programs, developer community engagement, partnerships with research networks, and a commitment to diversity and inclusion, but do not provide concrete data points on formal partnerships with indigenous or local groups, revenue reinvested in local communities, cultural appropriation incidents, cultural impact assessment protocols, local employment ratios, grievance mechanisms, FPIC participation, community governance inclusion, cultural preservation investment, local procurement, indigenous supplier engagement, cultural site protection, social license, charitable giving to cultural organizations, community fund allocation, language inclusivity, cultural incident response, or cultural sensitivity training completion.
1
Safe & Smart Tech
-10
Backblaze has not reported any data breaches in the past three years. The company experienced a minor data exposure in March 2021, affecting 9,245 users, where third-party tracking code inadvertently accessed limited user metadata.
1
Backblaze holds numerous privacy and security certifications, including SOC 2 Type 2, HIPAA BAA, PCI-DSS, ISO 27001, TPN Blue Shield, and adheres to the EU-U.S. and Swiss-U.S. Data Privacy Frameworks.
2
User files are encrypted by default, and server-side encryption is supported for the Backblaze S3 Compatible API.
3
Users can correct, update, or request deletion of details in their account.
4
The company implemented a Bugcrowd Bug Bounty Program and doubled its security team size.
5
Backblaze also investigated and patched the Log4j vulnerability in December 2021, taking systems offline and finding no unauthorized access.
6
Zero Waste & Sustainable Products
0
No evidence available to assess Backblaze, Inc. on Zero Waste & Sustainable Products.