Encryption in transit & at rest
TLS for all API and web traffic. Sensitive data encrypted at rest in production environments.
Content
Trust Center
Security, compliance, and data protection for workspace operators.
Enterprise buyers need proof before they shortlist. This page summarises how FlexiAres protects operator and member data — encryption, access control, auditability, and compliance readiness.
Security controls
Built for enterprise scrutiny
Controls your security team can review before procurement.
Role-based access
Scoped permissions by role, location, and module — least privilege by default.
Audit trails
Configuration changes, approvals, and billing actions logged for compliance reviews.
Data residency options
Deployment options discussed during enterprise onboarding to meet regional requirements.
Frameworks enterprise buyers ask about during vendor review.
Compliance readiness
SOC 2 readiness
Control environment aligned with SOC 2 trust principles — available on request for enterprise evaluations.
ISO 27001 alignment
Information security management practices mapped to ISO 27001 control domains.
GDPR & data privacy
Data processing agreements, subject access workflows, and retention policies for EU operators.
PCI-aware payments
Payment flows integrate with certified gateways — card data does not touch FlexiAres servers.
Your data stays yours
FlexiAres processes operator and member data solely to deliver the contracted service. We do not sell data. Export and deletion requests are supported for enterprise accounts.
Data processing agreement
Standard DPA available for enterprise contracts.
Sub-processor transparency
List of infrastructure and integration sub-processors provided on request.
Incident response
Documented incident response process with customer notification SLAs for enterprise tiers.
Security FAQ
Can we get a security questionnaire completed?
Yes. Enterprise prospects receive a completed SIG/CAIQ or custom questionnaire as part of the evaluation process.
Do you support SSO?
SSO via SAML is available on Enterprise plans. Contact sales for IdP configuration details.
Where is data hosted?
Production environments run on enterprise cloud infrastructure. Regional deployment options are discussed during enterprise onboarding.
How do you handle penetration testing?
Regular third-party penetration tests and vulnerability scanning are part of our security programme. Summary reports available under NDA.
Next step
Need the full security pack?
Request our security overview, DPA, and sub-processor list for your vendor review.