Trust Center

Welcome to Flomenco's Trust Center. Flomenco is a remote-only company that operates entirely in the AWS Cloud. This Trust Center provides a comprehensive overview of our security and trust practices, demonstrating our commitment to protecting your data and maintaining a secure environment.

At Flomenco, we prioritize the confidentiality, integrity, and availability of your information. We achieve this through a multi-faceted approach that includes robust physical security measures, stringent vendor management, and comprehensive data protection strategies.

While Flomenco does not operate physical server rooms or corporate offices, we rely on AWS for the physical security and environmental controls of our data centers. We annually review AWS's compliance documentation, including their SOC 2 and ISO 27001 attestations, to ensure their adherence to high security standards. Our employees are also responsible for securing company-issued equipment, which must be encrypted and protected by strong passwords and endpoint protection software.

Our commitment to security extends to our vendor relationships. We have a comprehensive Vendor Management Policy to ensure that all third-party service providers meet Flomenco's requirements for preserving and protecting information. This includes ensuring vendors comply with our information security program, contractual security requirements aligned with ISO 27001, SOC 2, and GDPR, and customer commitments. We strictly adhere to all applicable legal, regulatory, and contractual requirements regarding the collection, processing, and transmission of sensitive data, such as Personally-Identifiable Information (PII).

Data protection is a core tenet of our security posture. We leverage AWS Key Management Service (KMS) for our Public Key Infrastructure (PKI). Our policies also cover the secure handling of hardware tokens and the immediate reporting of any loss, theft, or potential unauthorized disclosure of encryption keys.

This Trust Center serves as a central resource for understanding how Flomenco safeguards your data and maintains a secure and trustworthy environment. We invite you to explore the detailed information provided in the various sections of this portal.