SOC 2 Type 2
Fuuz is SOC 2 Type 2 audited. Reports are available under NDA.
Trust centerGovernance and security
IT sets the guardrails. OT builds inside them. Fuuz gives enterprise IT one place to secure, monitor and govern every application, connection, user and agent.
Controls
Fuuz is SOC 2 Type 2 audited. Reports are available under NDA.
Trust centerIdentity through OpenID Connect (OIDC), with as many identity providers as your use cases need, a password policy for each, and multi-factor authentication you can enforce for everyone or for selected users.
Every authentication event is logged with the user, each attempt and the location, so you always know who signed in, who tried and from where.
Tenant-level, field-level and IP-level security, including IP allowlists, plus security rules by user, applied to every app and every API call.
Changes are logged with the user, the time, and the before and after values.
Data is encrypted in transit and at rest, and the Fuuz Gateway opens no inbound ports on your network.
Encryption standards, key management, provisioning, retention and testing details are in the trust center.
Multi-site access
Every plant gets its own access controls, built into the platform. Sites run their day-to-day, and the enterprise keeps the final say on who gets in.
When a site needs a new user, it requests access. An authorized enterprise administrator reviews and approves the request before the account is active, so access grows the way your organization intends.
How access flows
Self-administered
Create, scope and revoke your own API keys, without waiting on a vendor.
Administer your own tenants, including build, QA and production environments.
Define the roles, policy groups and policies that match how your organization actually works.
Change governance
Build
Every change is versioned, in your Git or in Fuuz's built-in version control.
Test
Changes are tested and signed off before they move forward.
Release
A versioned package is installed, with a full audit trail.
Recover
If something is wrong, roll back to the previous release.
Compliance programs
Fuuz supports a shared responsibility model for customers working under ITAR and CMMC requirements. We define which controls the platform provides and which you operate.
Fuuz is working toward 21 CFR Part 11 compliance, targeted for 2027.
Customers configure the platform to support their own quality and industry programs, with audit trails and electronic records.
Compliance
Fuuz helps manufacturers meet customer and industry requirements with traceability, audit trails and enforced process, captured as the work happens.
Forward and backward genealogy across production and quality.
Changes logged with who, when, and before and after values.
Checks, sign-offs and holds built into the workflow.
A shared responsibility model for ITAR and CMMC work.
Learn moreWorking toward 21 CFR Part 11 compliance, targeted for 2027.
Modernize on your terms. Every system you retire is one less integration to maintain.
Get started
Tell us what you run today and what you need next. We will map how Fuuz fits, without ripping anything out.
Prefer to talk? Call 1-877-801-FUUZ (3889)