I am avoiding Blackblaze as they don't allow you to do due diligence. Any requests to get security audit reports, pentest reports under NDA are all ignored. If anyone know if they are available through their website I am looking forward hearing it.
What they should do is make you cut a half a million dollar check, refundable when you spend half a million dollars on services.
It removes so many headaches from dealing with people who think their $100 over a year is Very Big Money.
Actually I would expect that such a big company have these things readily available on request.
If a company ask me for similar paperwork (which they have) I have the paperwork in order and ready, they sign a NDA and I am sending them. It's just a step in the sales process imho
A company that never did a pen test or security audit or doesn't want to share them doesn't give me much trust to use them as a partner.
In this case it's not so much about a $100 spend, it's about them potentially leaving a lot of money on the table if they are incapable of delivering the reports in question.
Based on what I have experienced, those that have real decision making power in companies that will make a high six to seven figure purchases simply do not have time to vet their home projects where they are going to spending $100/year. The grandstanding arguments about importance of their projects come from people who probably won't even spend $100/year
You make it sounds this is ridiculous to do a security assessment or to ask for such paperwork. I can tell you that my company insurance even demands it. At the moment I prefer to pay 3x more and store things at a cloud provider which shares these kind of documentation.