Being that the blob is never decrypted off your local machine, it would have to be a local data API.