Trust
Trust is proven, not declared
In plain terms: how your applications are built, what you own, what the service depends on, and what we don't claim to be.
The code and the data are yours
Every generated application is real Next.js + Prisma code — not a mock-up locked inside our platform. The specification and the data it produces are yours.
No proprietary runtime, no lock-in: you can run the application wherever you want, with or without us.
- Source-code export as a ZIP
- Push to your own GitHub repository
- Host it freely, or use the included dedicated URL
- No dependency on a proprietary service to run the app
Correct by construction, not guessed
The method has two steps. The AI designs the business schema — it understands your domain. Then a deterministic engine writes the code — it guarantees technical conformity. Component properties are correct by construction, never inferred line by line by the model.
Before delivery, every application is validated in real conditions: the code is built, the app started, the navigation walked through. That is our runtime validation gate. The percentage of applications that pass all of these checks is published and dated.
Hosted in Europe
Blueprint Maker runs on infrastructure located in France (OVH). Your descriptions and your applications are processed on that European infrastructure.
And because the code is yours, you remain free to export the generated application and host it elsewhere, wherever you prefer.
What Blueprint Maker depends on
Transparency starts with enumeration. Here are the building blocks the service and the generated applications rely on, and what flows to each.
- Language models (schema design): Anthropic (Claude, primary), and depending on the case OpenAI, xAI (Grok) or Google (Gemini). Your description is sent to them to design the schema; the provider's use of that data is governed by its own terms.
- Hosting: OVH (France).
- Database: PostgreSQL.
- Open-source building blocks of generated apps: Next.js, React, Prisma, Tailwind CSS, Leaflet, Plotly.js, lucide.
Pipeline security
Dependencies of generated applications are installed without automatic install scripts ("--ignore-scripts") — a known npm supply-chain attack vector, neutralised by default.
No secret (API key, password) is stored in the delivered code.
What we don't claim to be
Blueprint Maker is not SOC 2, ISO 27001 or HIPAA certified. When we talk about security, we mean verifiable facts: code ownership, no lock-in, European hosting, a hardened build chain — not badges we don't hold.
The processing of your descriptions by model providers is governed by THEIR terms, which we relay but do not control.
The generated application faithfully follows what you describe; regulatory compliance specific to your activity (compliant invoicing, legal notices, GDPR of YOUR application) remains your responsibility.