Companies / Blast Audit / Subprocessors
Blast Audit provides an Excel add-in that extracts, matches and compares document data for audit work. It serves audit teams working in Excel.
Summarized from its homepage on 7 Nov 2026.
Subprocessors of Blast Audit
Blast Audit declares 9 subprocessors.
From the company's own list.Read the source
| Subprocessor | Purpose |
|---|---|
| Hosting of the website and the dashboard, receipt of support e-mail | |
| Service e-mails linked to the account and the subscription | |
| Web search offered by the Excel agent | |
| NEXT BP's e-mail, including e-mail sent to support | |
| Hosting on Microsoft Azure in France; Azure OpenAI (EU Data Zone) for artificial-intelligence features; Azure AI Content Understanding for document analysis and advanced reading of scanned pages; Azure AI service in the EU Data Zone; Azure AI Speech for voice input; Azure Communication Services for transactional e-mail | |
| Product analytics and audience measurement | |
| Error monitoring | |
| Payment and invoicing | |
| Authentication and single sign-on |
Certifications
| Standard | What the source says | Checked |
|---|---|---|
| ISO 27001Company's statement | “Audited like you audit SOC 2 Type 2 report issued by Sensiba; ISO 27001:2022 certificate issued; GDPR with a public DPA.”The company's own statement. We have not checked an accreditation registry. | 10 Nov 2026Source |
| SOC 2 Type IICompany's statement | “Audited like you audit SOC 2 Type 2 report issued by Sensiba; ISO 27001:2022 certificate issued; GDPR with a public DPA.”The company's own statement. SOC 2 has no public registry; the report itself is shared by the company, usually under NDA. | 10 Nov 2026Source |
We last read its homepage on 10 Nov 2026 and the FedRAMP Marketplace on 8 Nov 2026. A standard not shown here was not found in these sources. That does not mean Blast Audit lacks it.
Vendor's own statement, retrieved from the source URL on the date shown. StrataDB does not verify the underlying claim. Data sources.
See Blast Audit's full stack
Every vendor with its source and date, and an alert when Blast Audit adds or drops one. The same lookup works for any company.
- Every company and vendor, with its public source
- 100 API calls a month, plus MCP and the Chrome extension
- Work email only. No card, no sales call