Regional Compliance

Regional data handling and compliance approach at FMIS

Regional Compliance

FMIS supports organisations operating across multiple regions. While our systems are hosted and managed in the UK, our approach to security and data protection is aligned with recognised international standards. This section provides an overview of how FMIS supports organisations in different regions.

United Kingdom

FMIS solutions are typically hosted in the UK and align with UK data protection and public sector requirements.

ISO 27001 and Cyber Essentials Plus certifications
Data is stored and managed within the UK unless otherwise specified
Practices align with UK GDPR, DPA and ICO requirements
UK-based development and support teams
Accessibility is reviewed against WCAG standards, with ongoing improvements in line with current guidelines
Hosting is delivered through secure, accredited UK environments suitable for public sector use, including Police Assured Secure Facilities (PASF) hosting.
Compliance with NHS accounting and security requirements
FMIS staff operate under defined access controls, with appropriate vetting and security processes in place

This provides a consistent and controlled framework for organisations operating within the UK, including those with specific public sector and compliance requirements.

European Union

FMIS supports organisations operating within the European Union, including Ireland, through alignment with GDPR and established cross-border data handling frameworks.

Data handling practices align with EU GDPR principles
Data transfers between the EU and UK are supported under recognised adequacy arrangements
Systems are accessed securely from EU locations via a browser-based interface
Consistent security and access controls are applied across all environments
Support is provided for audit, reporting, and compliance requirements where needed

While cloud hosting is typically UK-based, data protection standards and operational controls are applied in line with EU expectations, providing a consistent and compliant approach for EU-based organisations.

North America

FMIS supports organisations across North America in both the public and private sectors. The system is designed to operate in multi-country and multi-currency environments, supporting organisations with complex operational and financial structures.

Used by organisations across the US and Canada
Designed to support multi-entity, multi-country, and multi-currency requirements
Security controls are aligned with recognised standards, including ISO 27001, and broadly reflect SOC 2 principles
Data protection practices are aligned with key North American privacy frameworks, including CCPA
Systems are accessed securely via a browser-based interface, supporting distributed teams and locations

Further information can be provided to support security reviews, audits, and procurement processes where required.

International

FMIS supports organisations across Africa, Australasia, South America, and Asia. The system is designed to operate in multi-company and multi-currency environments, supporting organisations with international operations.

Used by organisations across multiple international regions
Designed to support multi-entity, multi-country, and multi-currency requirements
Security controls are aligned with recognised international standards and industry best practice
Data protection practices are broadly aligned with international privacy frameworks and standards comparable to GDPR
Systems are accessed securely via a browser-based interface, supporting distributed teams and locations

This provides a consistent and controlled approach to security and data handling for organisations operating internationally.

Further information

If you require additional detail on regional considerations or data handling, please contact:

privacy@fmis.co.uk

Regional Compliance