Security by Design
Security is considered throughout the design, development and operation of the Flex Platform, with safeguards for confidentiality, integrity and availability.
At Flex, trust is fundamental to everything we build.
The Flex Platform supports organisations that manage learning, skills development, assessments, evidence, certifications and operational workflows. Our Trust Center explains how we govern the platform, protect information, safeguard privacy and apply responsible technology practices.
Whether you are evaluating Flex, implementing the platform or already using it, these resources explain the principles, policies and standards that guide our approach to security, privacy, compliance and responsible innovation.
Flex is designed around clear governance, responsible operation and practical safeguards for the organisations that rely on the platform.
Security is considered throughout the design, development and operation of the Flex Platform, with safeguards for confidentiality, integrity and availability.
Our privacy practices are aligned to POPIA principles and support applicable international privacy requirements where appropriate.
AI and automation should enhance productivity while remaining subject to governance, transparency and human oversight.
Our policies provide Customers, Platform Users and stakeholders with clear information about how Flex is governed and protected.
Policies are grouped into the three areas most organisations need during evaluation, onboarding and governance review.
The policies and terms that govern use of the Flex website and Flex Platform.
How Flex collects, processes and protects Personal Information.
How Flex secures the platform and governs responsible use of emerging technologies.
Security and privacy work best when Flex, Customers and Platform Users each understand their role.
Responsible for the security and operation of the Flex Platform and the platform environments under our control.
Responsible for configuring environments, managing permissions and ensuring their users comply with organisational policies.
Responsible for protecting credentials, using the platform appropriately and reporting suspected security concerns.