Yearly Salesforce security audits
As a solution on the AppExchange, flair is subject to detailed Salesforce security audits.
The Number One HR Solution on Salesforce
HR Data Security on Salesforce
Keep your HR data safe with enterprise-grade security tech. flair is built on Salesforce, so you can comply with GDPR, SOC 2, and more.

flair undergoes regular security reviews as part of our partnership status and benefits from Salesforce's robust security framework, designed to protect data at every level.
As a solution on the AppExchange, flair is subject to detailed Salesforce security audits.
Salesforce employs a comprehensive data security structure with multiple layers.
Salesforce provides ways for global businesses to fulfill data sovereignty obligations.
Salesforce Shield offers flair users extra safety with event monitoring and Field Audit Trail.

Harald Mayer
CPO & Co-Founder
Founded in 2022
Tech
Remote team
"Working remotely raises the bar when it comes to your expectations of usability. You rely on high-quality digital tools for every aspect of work – and flair helps us keep track of them all.“
flair is built natively on Salesforce: HR data is stored as records in the customer's Salesforce instance. According to the list of sub-processors in flair's data processing agreement (DPA), the HR software is hosted by Salesforce in Frankfurt, and the employee portal by AWS, also in Frankfurt.
For companies that need their data stored and processed in the EU, Salesforce also offers the Hyperforce EU Operating Zone.
Salesforce encrypts data at rest and in transit. Salesforce Shield is available as an option: Shield Platform Encryption encrypts fields and files with 256-bit AES, alongside Event Monitoring and Field Audit Trail. You decide who can see and edit which HR data with Salesforce permission sets and profiles.
Yes. flair's DPA follows Art. 28 GDPR and is based on the EU Standard Contractual Clauses (Implementing Decision (EU) 2021/915). It sets out the technical and organisational measures and the list of sub-processors, including Salesforce and AWS. flair announces intended changes to that list at least 30 days in advance so you can object.
Yes. Built on Salesforce, flair helps you comply with GDPR, SOC 2 and more: role-based access, encryption, Salesforce's security reviews for AppExchange solutions and a DPA under Art. 28 GDPR. Your company remains the controller under the GDPR; flair processes employee data as a processor.
Ready to see how your organization will thrive with flair? Get in touch with us to discuss your needs and see how flair can help you boost your HR efficiency.
Take a tour of flair tailored to your top priorities
We'll support you throughout the process
