Data Protection & Privacy

Data protection, privacy, and regulatory compliance at FMIS

FMIS data protection and privacy

Data Protection & Privacy

FMIS provides systems used to manage financial and operational data. Data protection is therefore a core part of how our solutions are delivered and supported.

This page explains how FMIS handles data in practice, including roles, responsibilities, and the controls applied to protect client information.

Security and compliance enquiries
Security & compliance

If you have questions about security, data protection, or require documentation for a review, get in touch with our team.

Email our team Privacy policy Cookie policy
General enquiries: +44 (0) 1227 773003 Mon–Fri, 9:00–17:00 (BST/GMT)

FMIS UK GDPR compliance

Regulatory alignment

FMIS aligns its data protection practices with recognised regulatory frameworks and maintains registration with the UK Information Commissioner’s Office (ICO).

  • UK GDPR & UK DPA
  • EU GDPR
  • ICO registered data processor

Our approach is designed to support organisations operating across multiple regions, with consistent data handling and security controls regardless of location.

Data handling in practice

Data is managed within a controlled environment, with consistent standards applied across all systems.

  • Access is restricted based on user roles
  • Data is protected through encryption in transit and at rest
  • Activity within the system is recorded to support audit and traceability
  • Environments are segregated to reduce risk

These controls are applied as part of day-to-day system operation, not as separate or optional measures.

FMIS Data Protection Roles

Roles and responsibilities

FMIS acts as a data processor, with clients retaining responsibility as the data controller.

In practice, this means:

  • Clients define how their data is used and managed
  • FMIS provides and supports the system used to store and process that data
  • Access to data is controlled based on client-defined roles and permissions

This separation ensures that control remains with the organisation that owns the data.

multicompany, multicountry and multicurrency fixed assets

Data residency & subprocessors

FMIS cloud solutions are hosted in the UK unless otherwise specified, with data stored and managed within this environment. Systems are accessed by organisations internationally, but the same controls and standards are applied across all deployments.

Where third-party services are required, they are selected and managed in line with our information security and data protection policies. This includes appropriate due diligence and ongoing review.

FMIS Data Protection and Privacy Client Support

Supporting client responsibilities

FMIS supports clients in meeting their own data protection obligations.

This includes:

  • Providing controlled access to data
  • Supporting audit and reporting requirements
  • Assisting with data-related queries where appropriate

Formal policies and additional detail can be found here:

Further information

If you have specific questions relating to data protection or require additional documentation, please contact:

privacy@fmis.co.uk

G-Cloud 15 - Government Commercial Agency Supplier logo

FMIS awarded G-Cloud 15 supplier status

FMIS Asset Management Software awarded G-Cloud 15 Supplier Status for Fixed Asset Management, Lease Accounting, Asset Tracking & Equipment Maintenance software.
UK public-sector indexation

Indexation in UK Public Sector Fixed Asset Accounting

Understanding how indexation fits alongside revaluation is now essential for finance teams managing non-current assets in the public sector.
Non-Current Assets vs Fixed Assets In the UK public-sector

Why the UK Public Sector Is Moving from Fixed Assets to Non Current Assets

Why is the UK public sector shifting to non-current assets, and how does FMIS software enhance control and compliance?
SORP_Lease_Accounting_changes_2026