Trust Centre

Security, Privacy and Compliance at FMIS

Trust Centre

Security, data protection, and system reliability are built into how all our systems are designed and delivered. This Trust Centre brings together key information about our approach to security, privacy, and compliance, including how our systems are hosted, how data is protected, and how security is applied across development and day-to-day use.

It is intended to provide a clear overview for initial review, while also supporting more detailed security and compliance checks where needed.

Our approach

Aligned to recognised standards, including ISO 27001, ISO 9001, and Cyber Essentials Plus
Delivered through secure cloud infrastructure or local installation
Developed and supported by the FMIS team directly
Built around controlled access, encryption, and monitored environments
Supported by regular testing, including annual independent penetration testing

In practice

Security is built in over the full lifecycle of the system:

Access is controlled through role-based permissions and multi-factor authentication
Data is protected in transit and at rest
Development follows a structured approach with controlled releases
Vulnerabilities are identified and resolved through ongoing scanning and testing
Incidents are logged, reviewed, and managed through defined processes

FMIS typically acts as a data processor, with clients retaining control of their data. We minimise reliance on subprocessors and apply consistent standards across all environments.