generated: '2026-07-19'
method: searched
probe: false
source: https://www.getflexpoint.com/company/security
url: https://www.getflexpoint.com/company/security
certifications:
  - PCI DSS Level 1
practices:
  - Data encrypted in transit (TLS) and at rest
  - Double encryption at the column level for sensitive data
  - Passwordless login using one-time PINs bound to account and device
  - Hosted on Microsoft Azure with firewalls, WAFs, and network isolation
  - Continuous monitoring and role-based access controls
  - No sensitive cardholder data stored on FlexPoint servers
evidence:
  - source: https://www.getflexpoint.com/company/security
    keywords: [pci dss level 1, encryption, azure, role-based access control]
notes: >-
  Security posture / compliance page (not a dedicated trust-center subdomain).
  No SOC 2, ISO 27001, or HIPAA attestation is published publicly.