Security is a very serious subject at Phlex. We offer measures like 2FA, SSO, and PCI to ensure that the safety of your data remains intact and that we protect your organization. Our entire service infrastructure is cloud hosted on Microsoft's Azure platform. Microsoft Azure completes an annual PCI DSS assessment using an approved Qualified Security Assessor (QSA). The auditor reviews the Azure environment, which includes validating the infrastructure, development, operations, management, support, and in-scope services. The PCI DSS designates four levels of compliance based on transaction volume. Azure is certified as compliant under PCI DSS version 3.2 at Service Provider Level 1 (the highest volume of transactions—more than 6 million a year). The assessment results in an Attestation of Compliance (AoC) and Report on Compliance (RoC) issued by the QSA. The effective period for compliance begins upon passing the audit and receiving the AoC from the assessor, and ends one year from the date the AoC is signed. The AoC is available to customers to show the QSA has determined that Azure is in compliance with PCI DSS v3.2. To find out more about the compliance specifications in place please visit the Microsoft Trust Center

Yes. You can upgrade your Phlex services at any time. At upgrade time you will have to pay for any services you have utilized up to that point. Once paid a new service plan will be created that reflects the upgrade/downgrade path you have taken.

No. Paid plans dont provide additional services to you. They simply give you discounts that reduce the per/transaction cost of our payment services. You can use all the other aspects of Phlex at no additional cost.