> ## Documentation Index
> Fetch the complete documentation index at: https://docs.flexagon.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Flexagon SaaS Single Tenant Model

> How Flexagon SaaS provides dedicated, isolated environments per customer with separate TEST and PROD VNets.

Flexagon's SaaS platform provides dedicated and isolated environments for each customer and is not a traditional shared multi-tenant application.

Each customer receives two separate FlexDeploy instances, typically **TEST and PROD**. Each instance is deployed within its **own dedicated Azure Virtual Network (VNet)**, providing network-level isolation not only between customers, but also between the customer's TEST and PROD environments. Application, database, storage, and associated resources are provisioned specifically for that customer and are not shared with other Flexagon SaaS customers.

Data is encrypted **at rest and in transit using Azure-supported encryption and TLS**. Access is controlled through Microsoft Entra ID/RBAC and least-privilege principles, with secrets securely managed in Azure Key Vault. Internet-facing traffic is protected through Azure Front Door Premium and Web Application Firewall (WAF) controls.

Overall, each customer has dedicated application and data resources with **separate VNets for TEST and PROD**, providing strong customer and environment-level isolation.