Trust Center
Technical security controls, hosting regions, and downloadable assurance documents for IT, CISO, and DPO due diligence. FluxeHRa is offered as Full HR (+ e-sign) or E-Sign only on a multi-tenant EU stack (Supabase Ireland, Vercel Dublin). Native e-signature is eIDAS SES with optional PAdES-B. The ISO Alignment Pack covers ISO/IEC 27001:2022 Annex A (93 controls) with honest status — not a certification claim. The product does not process medical/health data; HDS hosting is not required or claimed.
Pick the contract and typical AIPD that match your product edition. Shared assurance documents (white paper, ISO, privacy, sub-processors) apply to both.
Documents by product edition
Full HR (+ E-Sign)
SIRH modules plus native e-signature. Separate DPA, Terms, and typical AIPD annex for this edition.
Common documents
Apply to both Full HR and E-Sign only. HTML and PDF are provided for consistency.
Hosting & sub-processors
- Supabase — PostgreSQL, Auth, Storage (production region
eu-west-1, Ireland) - Vercel — Next.js application & API (
dub1, Dublin) - Axiom — security SIEM telemetry (
SECURITY_EVENT; technical events only, no HR business payloads; US East edge)
FluxeHRa does not process medical or occupational-health dossiers. Standard EU hosting applies; French HDS certification is not required for this product scope and is not claimed.
Privacy & DPA
Read our Privacy Policy for website visitors and application users. Customers typically act as controller; FluxeHRa acts as processor under the edition-specific DPA above. Questions: contact@fluxehra.ai.
Security contact
Vulnerability disclosure: SECURITY · contact@fluxehra.ai.