--- title: "Safety first: How we keep your data secure at Flux" description: Security is a big deal at Flux. Our platform looks after electricity and gas supply and usage for ten energy retailers in three markets around the globe. image: https://www.fluxfederation.com/hubfs/Flux%202.0/Blog/20220506-Keeping-data-secure.jpg --- con tit [![flux](https://www.fluxfederation.com/hubfs/flux_2023/images/logos/flux.svg) ![flux\_dark](https://www.fluxfederation.com/hubfs/flux_2023/images/logos/flux_dark.svg)](https://www.fluxfederation.com) Platform ##### [![20230822 Flux Nav - Billing -1](https://www.fluxfederation.com/hubfs/General%20Images/20230822%20Flux%20Nav%20-%20Billing%20-1.svg) Billing Configurable, flexible energy billing for today, and tomorrow.](https://www.fluxfederation.com/products-billing) ##### [![20230822 Flux Nav - Billing use cases-1](https://www.fluxfederation.com/hubfs/General%20Images/20230822%20Flux%20Nav%20-%20Billing%20use%20cases-1.svg) Billing use cases Solar and battery, electric vehicles, time of use, PPA, VPP and more.](https://www.fluxfederation.com/billing-use-cases) ##### [![20230822 Flux Nav - Market Operations -1](https://www.fluxfederation.com/hubfs/General%20Images/20230822%20Flux%20Nav%20-%20Market%20Operations%20-1.svg) Market Operations Complete the picture for end-to-end energy retail solution.](https://www.fluxfederation.com/market-operations) ![20230822 Flux Nav - Market Operations use cases-1](https://www.fluxfederation.com/hubfs/General%20Images/20230822%20Flux%20Nav%20-%20Market%20Operations%20use%20cases-1.svg) ##### Market Operations use cases Customer communications, single customer view and more. ##### [![20240314-Flux-Preparing-for-success-Nav-Crop](https://www.fluxfederation.com/hs-fs/hubfs/General%20Images/20240314-Flux-Preparing-for-success-Nav-Crop.jpg?width=1386&name=20240314-Flux-Preparing-for-success-Nav-Crop.jpg) Featured resource Preparing for Success: Four key billing transformation learnings. A must-read for energy companies on the precipice of change. Download now](https://www.fluxfederation.com/preparing-for-success) Insights ##### [![20210608 Flux Icon HOME AUTOMATION CONNECTION BULB\_1 WHITE](https://www.fluxfederation.com/hs-fs/hubfs/Flux%202.0/Icons/20210608%20Flux%20Icon%20HOME%20AUTOMATION%20CONNECTION%20BULB_1%20WHITE.png?width=1386&name=20210608%20Flux%20Icon%20HOME%20AUTOMATION%20CONNECTION%20BULB_1%20WHITE.png) Insights The latest updates on everything energy. From growing business value to digital transformation and industry insights. Read more](https://www.fluxfederation.com/blog) ![20210608 Flux Icon MOBILE ELECTRICITY PURCHASE\_1 WHITE](https://www.fluxfederation.com/hs-fs/hubfs/Flux%202.0/Icons/20210608%20Flux%20Icon%20MOBILE%20ELECTRICITY%20PURCHASE_1%20WHITE.png?width=1386&name=20210608%20Flux%20Icon%20MOBILE%20ELECTRICITY%20PURCHASE_1%20WHITE.png) ##### Resources A knowledge hub that shares our insight for energy businesses undertaking the changes needed to evolve the sector. Explore the hub ##### [![20240411-Nav-Featured-Resource---iPad-user-preparing-for-success](https://www.fluxfederation.com/hs-fs/hubfs/General%20Images/20240411-Nav-Featured-Resource---iPad-user-preparing-for-success.jpg?width=1386&name=20240411-Nav-Featured-Resource---iPad-user-preparing-for-success.jpg) Featured resource Preparing for Success: Four key billing transformation learnings. A must-read for energy companies on the precipice of change. Download now](https://www.fluxfederation.com/preparing-for-success) [Why Flux?](https://www.fluxfederation.com/flux-offering) Company ##### [About Find out more about the people behind our leading edge platform, our Executive team and Board of Directors. About](https://www.fluxfederation.com/about) ##### [Careers Find out what it's like to work for a remote-first company designing and building innovative retail software for leaders of the energy transition. Careers](https://www.fluxfederation.com/careers) ##### [![20240212-the-benefits-of-modern-tech-1](https://www.fluxfederation.com/hs-fs/hubfs/Flux%202.0/Blog/20240212-the-benefits-of-modern-tech-1.jpg?width=1386&name=20240212-the-benefits-of-modern-tech-1.jpg) Featured post The time is now: Why the energy sector must adopt modern billing tech Read more](https://www.fluxfederation.com/blog/the-time-is-now-why-the-energy-sector-must-adopt-modern-billing-tech) Talk to an expert Talk to an expert # Safety first: How we keep your data secure at Flux [Flux Federation](https://www.fluxfederation.com/blog/author/flux-federation)  |  23 May 2020 ![20220506-Keeping-data-secure](https://www.fluxfederation.com/hubfs/Flux%202.0/Blog/20220506-Keeping-data-secure.jpg) ![blue gradient waves](https://www.fluxfederation.com/hs-fs/hubfs/flux_2023/images/bgs/blog-bg.png?width=1386&name=blog-bg.png) Security is a big deal at Flux. Our platform looks after electricity and gas supply and usage for 10 energy retailers in three markets around the globe. We hold a lot of sensitive personal data, so it’s important that we keep it secure for a whole lot of reasons. We have to meet legal compliance regulations, maintain our reputation and uphold our values, so we like to be proactive about keeping things locked down. Here are some of the things we do to keep our users’ data safe. ### **Secure Development** Our software is built on Ruby on Rails, which makes it easy to write code securely. By following good practice and using the framework’s capabilities, we minimise the risk of leaving ourselves open to common vulnerabilities. It’s hard to write Rails code that’s vulnerable to [SQL injection](https://en.wikipedia.org/wiki/SQL_injection) or [XXE](https://en.wikipedia.org/wiki/XML_external_entity_attack), for instance. Every line of code that makes its way to production has at least three sets of eyes over it: the original author and two independent reviewers. The second of these principally looks for security and performance issues.We’re an inquisitive lot, particularly around information security. Lots of the Flux crew attend events like [Kiwicon](https://kiwicon.org/) and keep updated on infosec developments. We’re proud to be part of the [Open Web Application Security Project (OWASP)](https://owasp.org/), a non-profit foundation that works to improve software security. The [OWASP Top 10](https://owasp.org/www-project-top-ten/) – a standard awareness document for developers and web app security – is recognised globally by developers as the first step towards more secure coding. We’re working on creating our own secure development training based around the OWASP protocols.  ![Flux at OWASP security event](https://www.fluxfederation.com/hs-fs/hubfs/Flux%20at%20OWASP%20security%20event.jpg?width=800&name=Flux%20at%20OWASP%20security%20event.jpg) ### **Security Testing** It’s important for us to confirm that our systems are as secure as we think they are. We put ourselves to the test with frequent table-top exercises, where we simulate security incidents and validate our ability to recover from them. We hope that we’ll never have to face situations like our data centre catching fire, or having someone with high-level access go rogue, but it’s good to be prepared. Even though we typically meet the targets we’ve set for ourselves in these exercises, they’re a great way to identify new areas or threats to work on. We don’t want to get cocky about our security, so we invite outside experts to try to crack our systems at least once a year. These penetration or pen tests are done by a range of specialist security firms – using a different company for successive tests maximises our chances of finding issues. Testers typically conduct a black box test, where they attempt to find exploits in our publicly available system. That’s followed by a white box test and code review. In this test, we give them a look at our source code and they have another go at exploiting our system, armed with insights the source code has given them.  We back these penetration tests up with frequent automated vulnerability scans of our production systems. Our automated build process also includes static analysis tools that spot common coding pitfalls. We know security breaches can happen at any level, so we’ve also submitted to tests by a security firm who use a variety of techniques, including having people in high-vis vests attempting to gain access to our office networks and offices.   ### **Security Compliance** As well as ensuring our development is secure and testing the safety of our systems, we have a register of security-related risks. Each risk is ‘owned’ by someone in the business who’s responsible for making sure our mitigations are up to date and effective. That includes managing the risks of a Flux-owned device being lost or stolen. We also make sure that  we’re encrypting data at rest, that our password policies are robust and that our crew know what data they should and shouldn’t have on their machines. All our staff go through security and privacy training so we’re well-briefed on everything from what good password hygiene looks like to the basics of [GDPR](https://gdpr.eu/). We’re also ISO 27001-certified, which means our products comply with a globally-recognised information security standard. ISO 27001 is published by the [International Organisation for Standardisation (ISO)](https://www.iso.org/isoiec-27001-information-security.html) and the [International Electrotechnical Commission (IEC)](https://www.iec.ch/). It’s intended to bring information security under management control by taking a risk-based approach. The current version, ISO 27001:2013, provides a set of standardised requirements for establishing, implementing, operating, monitoring, maintaining, and improving an Information Security Management System (ISMS). ISO 27001 provides a framework that helps Flux to protect our client and staff information, manage and minimise risk exposure, comply with various contractual and regulatory obligations, build a culture of security and protect our clients’ and our own brand image. While ISO/IEC 27001 is good practice in general, it also provides the right level of assurance for our existing and future clients. It’s our way of showing our clients and their customers that Flux has been taking a methodical, risk-based approach to securing our platform.  Our commitment to information security doesn’t stop with the certificate – we have to comply with surveillance audits every year and be re-certified every three years. Sticking to the programme makes good sense. ### **Flux is secure, wherever we are** Our attention to detail when it comes to secure development, security testing and compliance means that we didn’t have to change anything when our offices closed as a result of the Covid-19 pandemic. Our infrastructure was always set up for remote working, so our company-wide shift to our ‘home offices’ has had no negative security impacts. Our clients and their customers can be certain that we’re keeping their data safe, whether we’re working from two offices or 152.  ### Continue learning how we can help you ##### [![20240516-streamline-debt-manangement](https://www.fluxfederation.com/hs-fs/hubfs/Flux%202.0/Blog/20240516-streamline-debt-manangement.jpg?width=1386&name=20240516-streamline-debt-manangement.jpg) Growing business value Streamline debt management and drive profitability Read the story](https://www.fluxfederation.com/blog/streamline-debt-management-and-drive-profitability) ##### [![20240319-4-challenes-for-seller-1](https://www.fluxfederation.com/hs-fs/hubfs/Flux%202.0/Blog/20240319-4-challenes-for-seller-1.jpg?width=1386&name=20240319-4-challenes-for-seller-1.jpg) Growing business value 4 big challenges for energy sellers, according to the tech experts Read the story](https://www.fluxfederation.com/blog/4-big-challenges-for-energy-sellers-according-to-the-tech-experts) ##### [![20220211-VPP-blue-noise](https://www.fluxfederation.com/hs-fs/hubfs/Flux%202.0/Blog/20220211-VPP-blue-noise.jpg?width=1386&name=20220211-VPP-blue-noise.jpg) Growing business value Turning virtual into reality: Operationalising Virtual Power Plants Read the story](https://www.fluxfederation.com/blog/turning-virtual-into-reality-virtual-power-plants-for-energy-business) ##### [![20221208-Cost-out-value-in](https://www.fluxfederation.com/hs-fs/hubfs/Flux%202.0/Blog/20221208-Cost-out-value-in.jpg?width=1386&name=20221208-Cost-out-value-in.jpg) Digital transformation Can you have it all? Driving value in and cost out in a digital transformation Read the story](https://www.fluxfederation.com/blog/driving-value-in-and-cost-out-in-a-digital-transformation) ##### [![20240410-billing-software-for-australia](https://www.fluxfederation.com/hs-fs/hubfs/Flux%202.0/Blog/20240410-billing-software-for-australia.jpg?width=1386&name=20240410-billing-software-for-australia.jpg) Growing business value How modern billing tech can help energy sellers with the energy crisis Read the story](https://www.fluxfederation.com/blog/how-modern-billing-tech-can-help-energy-sellers-with-the-energy-crisis) ##### [![20240411-Energy-Transition-Blueprint-Refresh](https://www.fluxfederation.com/hs-fs/hubfs/Flux%202.0/Blog/20240411-Energy-Transition-Blueprint-Refresh.jpg?width=1386&name=20240411-Energy-Transition-Blueprint-Refresh.jpg) Growing business value Invest to stay in the game: Flexible tech is a blueprint for success Read the story](https://www.fluxfederation.com/blog/invest-to-stay-in-the-game-a-blueprint-for-the-energy-transition) ##### [![20231116-customer-retention](https://www.fluxfederation.com/hs-fs/hubfs/Flux%202.0/Blog/20231116-customer-retention.jpg?width=1386&name=20231116-customer-retention.jpg) Growing business value How modern billing software supports customer retention Read the story](https://www.fluxfederation.com/blog/how-modern-billing-software-supports-customer-retention) ##### [![20240212-the-benefits-of-modern-tech-1](https://www.fluxfederation.com/hs-fs/hubfs/Flux%202.0/Blog/20240212-the-benefits-of-modern-tech-1.jpg?width=1386&name=20240212-the-benefits-of-modern-tech-1.jpg) Digital transformation The time is now: Why the energy sector must adopt modern billing tech Read the story](https://www.fluxfederation.com/blog/the-time-is-now-why-the-energy-sector-must-adopt-modern-billing-tech) ##### [![20231214-End-energy-user](https://www.fluxfederation.com/hs-fs/hubfs/Flux%202.0/Blog/20231214-End-energy-user.jpg?width=1386&name=20231214-End-energy-user.jpg) Growing business value Why we mustn’t forget the customer as we power the energy transition Read the story](https://www.fluxfederation.com/blog/why-we-mustnt-forget-the-customer-as-we-power-the-energy-transition) ##### [![20231213-Nic-in-Europe---Collaboration](https://www.fluxfederation.com/hs-fs/hubfs/Flux%202.0/Blog/20231213-Nic-in-Europe---Collaboration.jpg?width=1386&name=20231213-Nic-in-Europe---Collaboration.jpg) Industry Insights Collaboration: the critical success factor of the energy transition Read the story](https://www.fluxfederation.com/blog/collaboration-the-critical-success-factor-of-the-energy-transition) ##### [![20231009-modern-billing-tech](https://www.fluxfederation.com/hs-fs/hubfs/Flux%202.0/Blog/20231009-modern-billing-tech.jpg?width=1386&name=20231009-modern-billing-tech.jpg) Digital transformation Why modern billing tech is essential in the new energy economy Read the story](https://www.fluxfederation.com/blog/why-modern-billing-tech-is-essential-in-the-new-energy-economy) ##### [![20230922-Dreamforce-insights](https://www.fluxfederation.com/hs-fs/hubfs/Flux%202.0/Blog/20230922-Dreamforce-insights.jpg?width=1386&name=20230922-Dreamforce-insights.jpg) Industry Insights Dreamforce 23: Insights into the energy revolution and our roles in it Read the story](https://www.fluxfederation.com/blog/dreamforce-23-insights-into-the-energy-revolution-and-our-roles-in-it) ##### [![20230913-Flux-Dreamforce-product-launch-1000x525](https://www.fluxfederation.com/hs-fs/hubfs/Flux%202.0/Blog/20230913-Flux-Dreamforce-product-launch-1000x525.jpg?width=1386&name=20230913-Flux-Dreamforce-product-launch-1000x525.jpg) Digital transformation Flux launches world-first product for scaling decarbonisation solutions Read the story](https://www.fluxfederation.com/blog/flux-launches-world-first-product-for-scaling-decarbonisation-solutions) ##### [![Decarbonisation, decentralisation and digitalisation of the energy sector](https://www.fluxfederation.com/hs-fs/hubfs/Flux%202.0/Blog/20230907-Flux---The-3-Ds.jpg?width=1386&name=20230907-Flux---The-3-Ds.jpg) Digital transformation Is the energy sector ready for the 3 Ds? Read the story](https://www.fluxfederation.com/blog/is-the-energy-sector-ready-for-the-3-d-s) ##### [![20230822-Customisation-over-configuration-noise](https://www.fluxfederation.com/hs-fs/hubfs/Flux%202.0/Blog/20230822-Customisation-over-configuration-noise.jpg?width=1386&name=20230822-Customisation-over-configuration-noise.jpg) Growing business value Configurability vs customisation: 4 tips for your next tech purchase Read the story](https://www.fluxfederation.com/blog/configurability-vs-customisation-4-things-to-consider-for-your-next-tech-purchase) ![purple gradient waves](https://www.fluxfederation.com/hs-fs/hubfs/flux_2023/images/bgs/form-bg.png?width=1386&name=form-bg.png) ## Be the first to know! Sign up for the latest updates in technology, changes, regulations, and new energy products from Flux. ###### Platform [Billing](https://www.fluxfederation.com/products-billing) [Market Operations](https://www.fluxfederation.com/market-operations) [Billing Use Cases](https://www.fluxfederation.com/billing-use-cases) Market Operations Use Cases ###### Insights [Blog](https://www.fluxfederation.com/blog) Knowledge hub ###### Flux Offering [Why Flux?](https://www.fluxfederation.com/flux-offering) ###### Company [About Us](https://www.fluxfederation.com/about) [Careers](https://www.fluxfederation.com/careers) Contact Us ###### Sign up for the latest news ![flux](https://www.fluxfederation.com/hubfs/flux_2023/images/logos/flux_small.svg) © Flux Federation [Privacy](https://www.fluxfederation.com/privacy) | [Terms](https://www.fluxfederation.com/website-terms-of-use) [![linkedin](https://www.fluxfederation.com/hubfs/flux_2023/masks/linkedin.svg)](https://www.linkedin.com/company/fluxfederation/) [![twitter](https://www.fluxfederation.com/hubfs/flux_2023/masks/twitter.svg)](https://www.twitter.com/fluxfederation) [![youtube](https://www.fluxfederation.com/hubfs/flux_2023/masks/youtube.svg)](https://www.youtube.com/@fluxfederation737)