Role-based workspace access
Owner and staff permissions keep workspace, integration, finance, and configuration controls with the people expected to use them.
Security, privacy, and control
Know what happens before a booking becomes data.
Flexboox makes access, data movement, exports, retention, and operational accountability visible—so a business can evaluate the controls available today before trusting the workflow.
Current product posture
Controls you can verify
Workspace access
Role and permission checks
Tenant boundary
Workspace-scoped records
Data portability
Admin JSON export
Operational history
Traceable high-impact actions
Verified in the current product: role-based access, tenant-scoped records, secret-redacted exports, and traceable high-impact actions.
Current safeguards
Controls that map to real product behavior.
The useful question is who can do what, how sensitive actions are constrained, and whether the resulting activity can be reviewed.
Tenant-scoped operations
Operational records stay bound to a workspace so one business cannot browse another business’s bookings, customers, or configuration.
Traceable high-impact actions
Important booking, payment, integration, support, export, and configuration activity is written to structured operational records.
Protected platform administration
Elevated platform access uses multifactor checks, explicit review, and privacy-aware operational views.
Controlled support access
Support sessions require a documented purpose, recent authentication, a fixed expiry, and an audit record.
Named payment providers
Configured Stripe or Mollie accounts handle payment collection while Flexboox keeps booking and payment status connected.
Data responsibility
Only the configured path should receive booking data.
A business chooses its calendars, payment providers, communication services, and external destinations. Flexboox keeps those routes explicit during setup.
01
Customer choice
The booking page collects the information required by the configured booking path.
02
Workspace operation
Availability, eligibility, booking state, and owner-visible history remain tenant-scoped.
03
Configured provider
Only enabled calendars, payments, communication services, or external destinations receive their required data.
Provider availability and exact data handling depend on the workspace configuration and the provider account selected by the business.
Data controls
Keep a usable way out.
Export, retention, cancellation, and deletion are related—but they are not the same operation. The current product keeps those boundaries explicit.
Export
Take a structured copy of workspace data
Authenticated workspace admins can download a tenant-scoped JSON export. Authentication, API, OAuth, invitation, management, and provider secrets are removed from the file.
Exports are rate-limited and recorded in the workspace audit history.
Retention
Set bounded retention periods and preview first
Workspace settings cover messages, provider events, analytics, operational and audit logs, invitations, client-record review, deletion markers, and backup-expiry targets.
A dry run shows eligible records without deleting tenant data; legal holds block destructive apply.
Leaving
Billing cancellation and workspace deletion stay separate
Paid-plan cancellation is handled through billing management. Permanent workspace deletion is a scheduled, preflighted operation that also handles connected storage, credentials, billing, and authentication records.
Flexboox does not present workspace deletion as an instant self-service action today.
Evidence boundary
Clear about what the current product supports.
Current product controls
Roles, tenant-scoped access, audit records, limited support sessions, rate limits, secret-redacted exports, retention controls, guarded webhooks, and integration credential masking.
Operational evidence
Production-readiness checks, health routes, delivery ledgers, controlled retention runs, guarded webhook processing, and documented recovery actions.
Evidence scope
Security statements on this page describe current product controls. Formal certifications, independent audit coverage, hosting-region commitments, and uptime SLAs are documented only when they can be verified.
Recent product work
Visible evidence that the product is moving.
These are current product refinements, not a substitute for a formal release history.
Provider directory capability view
Expanded the directory example to six providers with richer filters, list, map, and split views, plus a visible Rotterdam map.
More realistic interactive examples
Refined the read-only examples with authentic workflow data, current product states, and a clear explanation that demo interactions are not saved.
Direct-booking flow parity
Tightened service, date, time, and mobile review states so the public example better represents the current booking experience.
Evaluate the product directly
Start with the controls available today.
Create a booking page without adding payment details, or inspect the interactive examples before registering.