Certified
SOC 2 Type II
- Last Audit
- Mar 31, 2026
- Valid Till
- Mar 31, 2027
- Auditor
- AICPA
Compliance Dashboard
Security You Can Verify. Reliability You Can Depend On.
Every test run, every integration, every byte of data is protected by controls your security team can audit, verify and trust - across every region you operate in.
- Uptime SLA Guaranteed
- 99.9%
- Encryption Always On
- AES-256
- Active Certifications
- 4
- Audit Log Retention
- 3 Months
Certifications
Security Assured. Compliance Verified.
FireFlink is independently audited against the world's most rigorous security frameworks so your team ships with confidence.
Certified
ISO 27001
- Last Audit
- Apr 17, 2026
- Valid Till
- Mar 17, 2029
- Auditor
- AICPA
Renewing
GDPR
- Last Renewal
- Sep 27, 2024
- Next Renewal
- Sep 27, 2025
- DPO Assigned
- Yes
Certified
HIPAA
- Last Audit
- Jan 15, 2026
- Valid Till
- Jan 31, 2027
- Auditor
- QMINDS
Security & Governance
Governed by Policies. Enforced by Architecture.
Our security practices, VAPT results, access controls, and audit log policies.
Data Protection Officer
Responsible for overseeing FireFlink's data protection strategy and GDPR compliance.
dpo@fireflink.comVAPT & Pen Testing
- Last VAPT Date
- May 24, 2026
- VAPT Status
- Passed
- Critical Findings
- 0 Open
- High Findings
- NO
- Testing Firm
- Cyber Security Hive
Audit Log Retention
- Retention Period
- 3 Months
- Immutable Logs
- Enabled
- Log Storage
- Encrypted (AES-256)
- Access Logs
- All roles captured
Access Control
Role-Based Access Matrix
Granular, auditable permissions for every role - no ambiguity about who can see or do what.
| Capability | Super Admin | Admin | User | Guest |
|---|---|---|---|---|
| License Management | Full Access | No Access | No Access | No Access |
| Create Projects | Can Create | Can Create | No Access | No Access |
| Project Inclusion | All Projects | New Projects | Assigned Projects | Assigned Projects |
| Project Removal | Cannot Be Removed | Cannot Be Removed | Can Be Removed | Can Be Removed |
| Project Access | Full Access | Full Access | Role-Based | View Only |
| User Management | Full Access | Manage Users | No Access | No Access |
| Configuration Access | Full Access | Full Access | Role-Based | View Only |
| Resource Access | Full Access | Full Access | Role-Based | View Only |
| Billing & Subscription | Full Access | No Access | No Access | No Access |
Data Governance & Privacy
Your Data. Your Control.
Choose where your data lives, who can access it and how long it is retained - enforced at the platform level.
Frankfurt, Germany
St. Louis, USACalifornia, USA
UAE
IndiaSingapore
Automation and Device Farm
Automation
Device Farm
Data Center Locations
FireFlink Automation
- Singapore (SG Region)
- Frankfurt, Germany (EU Region)
- St. Louis, USA (US Region)
FireFlink Device Farm
- Singapore (SG Region)
- California, USA (US Region)
- UAE (Dubai)
- India (Mumbai)
Data Retention & Deletion
- License
- Cloud Professional
- Test Data Retention
- 6 months
- Post deletion purge
- 6 months
- Deletion confirmation
- Email Receipt
Privacy Safeguards
- Encryption at Rest
- AES-256
- Encryption in Transit
- TLS 1.3
- Data Masking
- Enabled
Policies Repository
Every Policy. Audit-Ready.
Request the policy and compliance documentation required for your audit or security review.
Policy NameAction
Information Security PolicyInformation security governance and control framework
Data Protection & Privacy PolicyPrivacy, data protection and regulatory compliance requirements
Incident Response PolicySecurity incident detection, response and communication procedures
Business Continuity Policy (BCP)Business continuity and operational resilience
Disaster Recovery PolicyDisaster recovery objectives, testing and restoration procedures
Uptime & Incident Transparency
No surprises. Ever.
Every incident disclosed publicly. Every outage measured. Zero spin - only facts your team can rely on.
All Regions Operational
- 90-day uptime
- 99.9%
- avg response
- 2.1s
- open incidents
- 0
Security Questionnaire
Explore our security, privacy and compliance standards.
Request the exact policy document your security team or auditor needs - versioned, dated and ready for review.
View Complete Security Questionnaire
Explore the full set of security and compliance questions covering infrastructure, access control, data protection, monitoring, governance, and more.