Data Security & Compliance
Last updated: September 2, 2026
This page describes, in general terms, FMS's approach to data security and the boundaries of what data the platform handles. It is provided for informational purposes and does not constitute a legal or compliance attestation.
What FMS Handles
FMS manages furniture and facilities logistics data: inventory records, item condition and location, and relocation, repair, or decommissioning requests. FMS does not process, store, or have access to protected health information (PHI) or any clinical patient data — the platform is intentionally scoped to furniture and asset logistics, separate from clinical systems entirely.
Encryption
Data transmitted between your organization's users and the FMS platform is encrypted in transit using industry-standard transport security. Data at rest within FMS's infrastructure is encrypted using industry-standard methods consistent with common SaaS security practices.
Access Controls
FMS is architected around strict per-tenant data isolation: each hospital or health system's inventory and request data is accessible only to that organization's authorized users, and multi-site health systems can grant system-level visibility to designated administrators without exposing individual sites' data to one another by default. Internal access to customer data by FMS personnel is limited to what's necessary for support and platform operations, and is logged.
Our Security Program
Our security program is designed around industry-standard practices for SaaS platforms handling operational business data — including access controls, encryption, and regular internal review of our security posture. We do not currently hold formal third-party security certifications; we describe our practices here in good faith and will update this page if that changes.
Security Contact
If you have a security question or need to report a concern, contact our security team at security@fms-platform.com.