Flosum
Flosum is a Enterprise GRC platform tool. It describes itself as "Salesforce SOX/GRC Compliance".
Key facts
- Category
- Enterprise GRC platform
- Describes itself as
- Salesforce SOX/GRC Compliance
- Headquarters
- San Ramon, California, United States
- Website
- flosum.com
- Others in this category
- 25
Identity confirmed
On 2026-09-12 the address above was checked against a primary source and does belong to Flosum. Evidence.
Frameworks Flosum claims
Read from https://www.flosum.com/resources/certifications-compliance on 2026-09-12. This records what the vendor states, not a certification and not an assessment.
Claims coverage
None of the twelve frameworks tracked here. That page was read and names none of them, which is common: plenty of compliance work, from the EU Cyber Resilience Act to e-invoicing mandates, sits outside this list.
Does not claim
ISO 42001, FedRAMP, CMMC, EU AI Act, DORA, NIS2. That means the page above does not claim these, not that the product cannot handle them. Ask.
Mentioned, but not as a claim
- SOC 2: the page states Flosum holds its own SOC 2 Type II, which is the vendor's certification rather than a framework the product helps customers comply with
- ISO 27001: listed as Flosum's own ISO/IEC 27001 certification, alongside 27017 and 27018, not as product coverage
- GDPR: listed as Flosum's own GDPR and U.S. Data Privacy Framework adherence, not as a compliance workflow the platform manages for customers
- HIPAA: the page says Flosum's own safeguards support customer HIPAA compliance, which is a shared-responsibility claim rather than stated product coverage
- PCI DSS: listed as Flosum's own PCI Level 1 compliance, not a framework the product automates
- NIST CSF / 800-53: the page says Flosum's controls are aligned with the NIST 800 series, which describes the vendor's own security programme rather than product coverage
About Enterprise GRC platform
Runs the whole governance, risk and compliance programme in one place: risk register, policies, controls, and audit workflow across many frameworks at once. See all 26 in this category.
Questions
- What does Flosum do?
- Flosum is a Enterprise GRC platform tool. It describes itself as "Salesforce SOX/GRC Compliance". Runs the whole governance, risk and compliance programme in one place: risk register, policies, controls, and audit workflow across many frameworks at once.
- What are the alternatives to Flosum?
- This directory lists 25 other Enterprise GRC platform tools, including 6clicks, AccessOwl, Anecdotes.
Alternatives to Flosum
Category is our editorial call; the vendor's own wording is above. This entry reflects public information and is not an assessment of the product. How this is built · Disclaimer