Security and compliance you can trust Keeping your complex battery and solar assets operational and compliant within evolving grid regulations. FlexGen delivers US-built technology, continuous monitoring and end-to-end de-risking services. Request Compliance Documentation ISO 27001 Certified FlexGen's security is verified through ISO 27001:2022 and ISO 27001:2013. Independently audited by an accredited 3rd-party certifying body. Regulatory Readiness Flexgen security has been assessed for NIS 2 Directive. Meaning compliance throughout the EU. Aligned with NERC CIP Flexgen meets all CIP standards to protect your critical infratstructure. SOC II Compliant FlexGen provides superior trading performance and critical services when they were needed most. Security Foundation Protect critical energy infrastructure from current and future threats Security considerations are embedded in every layer of HybridOS™, asset and lifecycle management services, and integrated solutions for emerging and growing sites alike. US-Designed & Controlled Software Stack Achieve complete control over your software stack with no dependency on foreign-controlled systems with HybridOS™ EMS, BMS, and PPC. Independently-Audited Controls FlexGen's security posture is verified through ISO 27001:2022 and ISO 27001:2013 certifications, independently audited by an accredited third-party certifying body. AI-Enhanced Monitoring Minimize downtime and increase availability at the asset, site, and fleet levels with AI-enhanced detection, evaluation, and action features. Single Sign-On & Identity Management Use your corporate identity management system to log into HybridOS™ seamlessly, preserving your organization's existing security policies. Software-Forward Architecture FlexGen works with any hardware that transmits or receives signals, and our team can isolate and replace non-compliant components without disrupting your entire system. Real-Time Fault Visibility HybridOS™ provides real-time, single-line visibility into battery sites,enabling faster response to alarms and less downtime. Remote Operations Centers 24/7 monitoring and regional troubleshooting for the entire fleet Downtime doesn’t wait for business hours. Two regionally-staffed Remote Operations Centers (ROCs) keep watch around the clock, providing fleet-wide performance monitoring, energy storage optimization, and rapid troubleshooting across every asset you operate. Issues get caught before they ever reach your site. Every asset passes through our Innovation Lab for hands-on functional testing and built-to-spec verification. Our team ensures that what ships to you is already proven to perform. Certifications & Compliance De-risk everything that could derail your project Certifications & ComplianceDe-risk everything that could derail your projectFlexGen's de-risking services cover the full spectrum of challenges facing battery and solar storage projects today. Talk to an Expert Regulatory Compliance A software-first approach keeps you adaptable and compliant. Proactive Data Security US-based controls safeguard operations. Supply Chain Management Software-forward configuration expertise mitigates supply risk. Equipment Procurement Timely, compliant purchasing ensures uptime. Turnkey Storage & Logistics Proper storage conditions, fire safety, and battery balancing. ITC Compliance Maximizes tax savings and protects financial assumptions. Built for today’s grid. Backed by 17 years of energy storage expertise. Let’s de-risk your energy storage site. From cybersecurity documentation to supply chain controls, our team has navigated it all — across 200+ projects. Talk to an Expert Frequently Asked Questions Why does it matter that FlexGen's software is US-built? Foreign-owned asset management systems create three risks that FlexGen mitigates at every stage, from procurement through deployment and sustaining engineering: - Cybersecurity: Non-US asset management software presents potential vulnerabilities to energy sites and the electric grid.- Supply chain: geopolitical dynamics could require abrupt shifts to US-based software, stalling critical projects.- Performance: most solutions are designed for single-battery automotive applications and don't meet the demands of large-scale energy storage. What is HybridOS™ and how does it support security? HybridOS™ is FlexGen's AI-enhanced software platform covering energy management (EMS), solar power plant control (PPC), and battery management (BMS) — all built and maintained in Durham, NC. It gives operators complete control over their software stack with no dependency on foreign-controlled systems, and supports SSO for seamless integration with your existing identity and access management policies. How does FlexGen help with regulatory compliance and cybersecurity de-risking? FlexGen's de-risking services cover regulatory compliance and cybersecurity mitigation, including implementing US-based controls to safeguard operations and the performance of your assets. How does FlexGen handle software updates and patching for deployed systems? HybridOS™ updates go through a controlled release process tested in our Innovation Lab before production rollout. Deployments are scheduled around operational windows. Because FlexGen owns the full software stack, you're never dependent on a foreign vendor's release schedule. Can FlexGen integrate with my existing identity and access management systems? Yes. HybridOS™ supports Single Sign-On (SSO), allowing you to use your corporate identity management system to log in while preserving your organization's existing security policies. Where is my operational data stored, and who can access it? Your data is stored in secure, US-based cloud infrastructure with encryption at rest and in transit. Access is restricted by least-privilege role assignments. FlexGen does not sell or share your operational data. All access is logged in audit trails. Where can I review FlexGen's security certifications and controls? FlexGen's full certifications, controls framework, and subprocessors list are available at trust.flexgen.com. Certificate documents are available on request.
