# Procurement Pack

Summary for security, legal, and procurement reviewers evaluating Blekline.

## Product summary

**Blekline** provides **Non-Human Identity & Runtime Enforcement** at the agent boundary — mask, enforce, and audit prompts and tool calls before they reach LLMs and downstream systems.

- **Cloud:** [app.blekline.com](https://app.blekline.com)
- **Open source:** [github.com/Blekline/blekline-oss](https://github.com/Blekline/blekline-oss)
- **Interactive demo:** [Runtime Simulator](/docs/playground/runtime-enforcement)

## OSS vs enterprise boundary

| Capability | OSS | Cloud / NHIM image |
|------------|-----|---------------------|
| MCP server, proxy, SDK | Yes | Yes |
| Ingress sidecar (contracts) | Yes | Yes |
| Trust Vault, Lineage engine | — | Yes (private runtime) |
| Azure authoritative PII | — | Yes |
| Fleet policy SSE, billing | — | Yes |

## Legal & privacy

- [Terms](https://blekline.com/legal/terms.html)
- [Privacy](https://blekline.com/legal/privacy.html)
- [Subprocessors](https://blekline.com/legal/subprocessors.html)
- [DPA outline](/docs/enterprise/deployment) — contact support@blekline.com for executed DPA

## Security artifacts

- [Threat model](/docs/security/threat-model)
- [Trust boundaries](/docs/security/trust-boundaries)
- [MCP identity pinning](/docs/security/mcp-identity-pinning)

## Pilot engagement

Design partner and pilot programs available — [GitHub design partner issue](https://github.com/Blekline/blekline-oss/issues/new?template=design_partner.yml) or support@blekline.com.

## Definitions

- [NHIM](/docs/definitions/nhim)
- [Zero Standing Privilege for AI](/docs/definitions/zero-standing-privilege-ai)