Security posture and trust baseline for Flaggr
Last updated October 15, 2026
Security & Trust
Flaggr security controls are designed for safe feature management in production workloads.
Security Baseline
- TLS in transit for all hosted endpoints.
- Encrypted storage at rest via managed cloud infrastructure.
- Project-scoped RBAC for dashboard and API access.
- API token scoping and rotation support.
- Structured audit logging for state-changing actions.
Control Areas
- Access control and least privilege.
- Secret management and token hygiene.
- Change traceability and auditability.
- Service reliability monitoring and alerting.
- Incident communication process.
Related Trust Documents
- Security Policy — how to report a vulnerability
- Data Retention
- Data Processing & Privacy
- Incident Disclosure
- Security Questionnaire