Enterprise-grade security by design
Security isn't an afterthought — it's the foundation of Flux Platform. Every feature is built with enterprise-grade security from day one.
Built to protect your data
Strict Tenant Isolation
Each organization's data is fully separated and application-enforced on EU-hosted infrastructure — no tenant can ever reach another's data.
Encryption at Rest
All data is encrypted at rest with AES-256-GCM, complemented by TLS in transit.
OIDC Single Sign-On
Per-tenant OpenID Connect single sign-on, tested with Microsoft Entra ID (Azure AD). SAML & SCIM are on the roadmap.
MFA Support
Multi-factor authentication with TOTP authenticator apps, backup codes, and WebAuthn passkeys — enforced for organization owners.
Audit Logging
Comprehensive audit trails with before/after diffs for all user actions and system events across every module.
Brute-Force Protection
Per-IP rate limiting and CrowdSec-based threat detection guard sign-in and API endpoints against automated attacks.
API Security
OAuth 2.0 secured REST API (beta) with refresh token rotation, rate limiting, and scoped permissions.
Role-Based Access Control
Granular RBAC with configurable roles and permissions across all modules.
Compliance-ready out of the box
Built-in support for major compliance frameworks with control mapping, evidence collection, and audit management.
ISO 27001
International standard for information security management systems.
SOC 2
Service organization controls for security, availability, and confidentiality.
NIS2
EU directive for a high common level of cybersecurity across the Union.
GDPR / DSGVO
European data protection regulation for personal data privacy.
TISAX
Automotive information-security assessment and exchange based on the VDA ISA catalog.
DORA
EU Digital Operational Resilience Act for the financial sector.
Ready to secure your organization?
Start your free 14-day trial today