diff --git a/docs/docs/support/faq/account-billing-organisation.mdx b/docs/docs/support/faq/account-billing-organisation.mdx index fc7dbf129822..3901c0ed9616 100644 --- a/docs/docs/support/faq/account-billing-organisation.mdx +++ b/docs/docs/support/faq/account-billing-organisation.mdx @@ -12,10 +12,6 @@ import Link from '@docusaurus/Link';
-### Is Flagsmith SOC 2 certified? - -Yes, Flagsmith is SOC 2 Type 2 certified. - ### How do I delete an Organisation? Go to **Organisation** > **Manage**. Scroll to the very bottom, click the trash can icon next to "Delete Organisation," and confirm the name. This is irreversible. @@ -65,8 +61,16 @@ Go to **Organisation** > **Edit** > **Manage Invoices**. **Related:** [How do I update my payment details?](#how-do-i-update-my-payment-details) +### Is Flagsmith SOC 2 certified? + +Yes, Flagsmith is SOC 2 Type 2 certified. You can request the report, along with our other certifications and security +documentation, through the [Flagsmith Trust Centre](https://trust.flagsmith.com). + +**Related:** [Security & Compliance FAQ](/support/faq/security-compliance) +
## Related FAQ Categories - [Open Source & Self-Hosted](/support/faq/open-source-self-hosted) - Questions about SSO and authentication in self-hosted deployments +- [Security & Compliance](/support/faq/security-compliance) - Questions about SOC 2, ISO 27001, GDPR and vendor reviews diff --git a/docs/docs/support/faq/index.mdx b/docs/docs/support/faq/index.mdx index 99ca67e2720d..10c271d20acd 100644 --- a/docs/docs/support/faq/index.mdx +++ b/docs/docs/support/faq/index.mdx @@ -18,6 +18,7 @@ import Link from '@docusaurus/Link';
  • What is the difference between Feature Flag and Remote Config?
  • How do I identify an anonymous user?
  • Does the % split segment feature work for non-identified users?
    • +
  • Is Flagsmith SOC 2 certified?
    • @@ -72,6 +73,13 @@ import Link from '@docusaurus/Link';

    Hosting, API endpoints, Edge API, webhooks, A/B test bucketing

    + + +
    +

    Security & Compliance

    +
    +

    SOC 2, ISO 27001, GDPR, penetration tests, sub-processors, security questionnaires

    + diff --git a/docs/docs/support/faq/security-compliance.mdx b/docs/docs/support/faq/security-compliance.mdx new file mode 100644 index 000000000000..05a54201d66f --- /dev/null +++ b/docs/docs/support/faq/security-compliance.mdx @@ -0,0 +1,63 @@ +--- +title: Security & Compliance - FAQ +sidebar_label: Security & Compliance +sidebar_position: 8 +description: + Flagsmith security and compliance FAQ - SOC 2 Type 2, ISO 27001, GDPR, penetration tests, sub-processors and security + questionnaires. +keywords: + - SOC 2 + - SOC2 + - ISO 27001 + - GDPR + - DPA + - penetration test + - sub-processors + - security questionnaire + - compliance + - trust centre +--- + +import Link from '@docusaurus/Link'; + + + +← Back to FAQ + +
    + +Security, compliance and vendor review documentation lives in the +**[Flagsmith Trust Centre](https://trust.flagsmith.com)**. It is the single, current source +for our certifications, reports and policies — start there for any of the questions below. + +### Is Flagsmith SOC 2 certified? + +Yes, Flagsmith is SOC 2 Type 2 certified. Request the report through the +[Trust Centre](https://trust.flagsmith.com). + +### How does Flagsmith handle GDPR and data processing agreements? + +Our privacy documentation, including the DPA and the list of sub-processors, is available through the +[Trust Centre](https://trust.flagsmith.com). + +### Can you complete our vendor security questionnaire? + +Check the [Trust Centre FAQ](https://trust.flagsmith.com/faq#1-security-governance) first — most questionnaires can be answered in full from the +documentation published there, which is faster than a manual review. If something is still outstanding, contact +[support@flagsmith.com](mailto:support@flagsmith.com). + +### How do I report a security vulnerability? + +See [CVEs and Vulnerabilities](/support/cves-and-vulnerabilities) for how to report an issue and the remediation SLAs we +work to. Do not report vulnerabilities through public GitHub issues. + +**Related documentation:** [Help and Support](/support#security-and-compliance) + +
    + +## Related FAQ Categories + +- [Account, Billing & Organisation](/support/faq/account-billing-organisation) - Questions about accounts, SSO and + billing +- [Open Source & Self-Hosted](/support/faq/open-source-self-hosted) - Questions about self-hosting and the Enterprise + Edition diff --git a/docs/docs/support/index.mdx b/docs/docs/support/index.mdx index f45b4c68a403..3421c1519a4d 100644 --- a/docs/docs/support/index.mdx +++ b/docs/docs/support/index.mdx @@ -80,7 +80,20 @@ depending on your issue type. - **In-app chat** - Click the support widget in the Flagsmith dashboard - **Email** - [support@flagsmith.com](mailto:support@flagsmith.com) - **Community** - [Discord](https://discord.gg/hFhxNtXzgm) -- **Trust Centre** - [trust.flagsmith.com](https://trust.flagsmith.com) + +### Security and Compliance + +Security questionnaires, compliance documentation and our SOC 2 Type 2 report are handled through the +**[Flagsmith Trust Centre](https://trust.flagsmith.com)** rather than the support channels above. Go there to: + +- Review our security posture, certifications and sub-processors +- Request access to compliance reports and policies +- Complete or shortcut a vendor security review + +Common questions about SOC 2, ISO 27001, GDPR and vendor security reviews are answered in the +[Security & Compliance FAQ](/support/faq/security-compliance). + +To report a security vulnerability, see [CVEs and Vulnerabilities](./cves-and-vulnerabilities.md). ### Enterprise Support