Trust Center
Technical security controls, hosting regions, and downloadable assurance documents for IT, CISO, and DPO due diligence. FluxeHRa covers Core HR, Performance, Learning, Analytics, and Compensation on a multi-tenant EU stack (Supabase Ireland, Vercel Dublin). FluxeHRa is not ISO-certified by virtue of these materials — see the ISO Alignment Pack for honest control status.
Downloads
Hosting & sub-processors
- Supabase — PostgreSQL, Auth, Storage (production region
eu-west-1, Ireland) - Vercel— Next.js application & API (
dub1, Dublin) - Axiom — security SIEM telemetry (
SECURITY_EVENT; technical events only, no HR business payloads; US East edge)
Full list: sub-processors note.
Privacy & DPA
Read our Privacy Policy for website visitors and application users. Customers typically act as controller for employee personal data; FluxeHRa acts as processor. For a Data Processing Agreement (DPA) or privacy questions, contact contact@fluxehra.ai. The current DPA and legal documents are available as downloadable files above.
Security contact
Vulnerability disclosure: see SECURITY.pdf or email contact@fluxehra.ai.