Skip to main content
Flexagon maintains a SOC 2 Type 2 security program to demonstrate the effectiveness of its security, availability, and confidentiality controls. A SOC 2 Type 2 report is the industry-standard assurance framework for cloud software providers. Customers occasionally inquire about other certifications like SOC 1, HITRUST or ISO certifications. The following information explains our position regarding these certifications and their applicability to Flexagon’s services.
  • SOC 1
    • Flexagon’s DevOps platform does not process financial transactions, perform accounting functions, manage payroll, or maintain systems that impact customer financial reporting. As a result, a SOC 1 examination is generally not applicable to our services.
  • HITRUST
    • Flexagon does not store, process, or transmit healthcare records or Protected Health Information (PHI) as part of its standard SaaS offering. The customer data maintained by the platform is generally limited to user account information such as first name, last name, and email address required for authentication and platform administration.
    • Because Flexagon does not process healthcare data, HITRUST certification is not currently required for our services.
  • ISO 27001
    • Flexagon is not currently certified to ISO/IEC 27001. As a cloud-based SaaS provider, Flexagon maintains a comprehensive information security program that is independently assessed through its SOC 2 Type 2 audit. The SOC 2 Type 2 examination evaluates the design and operating effectiveness of controls related to security, availability, and confidentiality across the organization’s systems and operations.
    • Flexagon continues to evaluate customer and business requirements when considering additional certifications and compliance frameworks.