Compliance
Flexbone complies with SOC 2 Type 2 standards, demonstrating ongoing commitment to security, availability, and confidentiality of customer data.
Reports
Controls
Live
In-scope repositiories
List of Changes
Sample changes
Source code tool
Branch Protection rules
Application Outages
Live
RGEC Charter and minutes
Risk management program established
ITLC charter and minutes
Board Charter
Internal control / Conduct Control Self-Assessments
Minutes of BOD meeting
Live
List of Newly Hired Employees & Contractors
List of Terminated Employees & Contractors
List of Active Employees & Contractors as on Date
New Employee and Contractor Acknowledgement
Existing Employee and Contractor Acknowledgement
Employee Handbook
Internal Communication for Changes in Roles
Security Awareness Training Implemented
Employees with Modified Access
Information Security Policies and Procedures
Access Control Procedures Established
Organization Chart
Senior Management Employee/Security Related Roles
Employee Annual Performance Report
Background Checks
Performance Improvement Program
Pre-Hire Checklist
Whistleblower Policy Established
Termination Checklist
Live
Portable Media
Alerts & Remediation
Baseline Documentation Updated and Reviewed
Segregation Between Different Environment
DLP Tool
Configurations for Capacity and Performance
VPN Access
Remote Access Tool
Patch Management
Data - Restorations
Multiple Availability Zone
Data - Backups
Backup and Recovery Policy
Vulnerability Scanning
Policy for Vulnerability Assessments
Anti-Virus and Malware Configuration
Firewall
SSL/TLS Certificates for Infrastructure and Applications
Encryption of Data
KMS Keys Details
Multi-Factor Authentication (MFA)
Login Page
Ticketing Tool
Access Restricted
Log Management Tool
Monitoring Tool
User List with Their Assigned Roles & Privileges
MDM (Mobile Device Management) Tool Configurations
MDM (Mobile Device Management) Tool List
Asset Maintaining
Asset Register List
Web Application Firewall (WAF)
Intrusion Detection Tool
Live
Vendor list
Vendor termination
Vendor onboarding
Vendor management program established
Policies














