Security isn't a feature. It's the architecture.
Security isn't something we bolt on. It's how FluxConnect is designed from the ground up.
Four core principles.
Data Isolation
Each retailer operates in its own isolated environment. It is technically impossible for one retailer to access another's data. No cross-retailer data paths exist. Supplier data is scoped within a single retailer tenant and cannot leak across boundaries.
Least Privilege
Suppliers see only the reports and data you explicitly grant them. Purchasers control exactly what is shared, report by report. Nothing is accessible outside explicitly defined scopes. Every access decision is intentional and auditable.
Defense in Depth
Multiple layers of security controls protect your data. From network isolation to application-level access controls to data encryption at rest and in transit. No single point of failure in the security model.
GDPR & Anonymisation
We adhere to GDPR requirements. Data anonymisation and aggregation ensure customer privacy is maintained when sharing insights with suppliers. No personally identifiable information is ever exposed to supplier users.
Tenant isolation model.
Supplier access: simple and secure.
A 50-second walkthrough: how a supplier's work email becomes a secured portal session, with no password to manage.
Email-based access
Suppliers receive a login link via email. No account creation, no passwords to manage.
One Time Password
Each login uses a fresh OTP. No stored passwords, no credential theft risk, no AD/Entra ID required.
Scoped access only
Suppliers see only their own data, and only the reports you enabled for them. Nothing more, nothing less.
Why no passwords?
Traditional password-based authentication creates friction and risk. Suppliers need to manage credentials, IT teams need to configure Active Directory or Entra ID integrations, and stored passwords are a target for attackers. FluxConnect eliminates all of this with OTP-based access. Each login is a fresh, time-limited code. There's nothing to steal, nothing to forget, and nothing to configure.
Or run it entirely in your own environment
For teams with strict data-residency requirements, FluxConnect Private Deployment runs inside your own Azure, AWS, or GCP tenant. The supplier portal, isolation model, and access controls described above are identical; the difference is that your data never leaves your environment. FluxConnect can reuse the data platform you already run, so no copy of your data is ever stored on infrastructure we host.
Compare SaaS and Private Deployment →Have security questions? Talk to our team.
We're happy to walk through our security architecture in detail.
Contact Us