Flexxible Achieves Spain's ENS High Category Certification

Flexxible, a European Digital Employee Experience (DEX) and Desktop as a Service (DaaS) platform, has achieved High category certification under Spain's National Security Framework (Esquema Nacional de Seguridad, or ENS), the most demanding category defined by Royal Decree 311/2022. The company has held the Medium category since 2022 and is now taking this additional step in its security strategy.
‍

The ENS is the regulatory framework that governs the security of information systems used by Spain's public administrations and by the technology providers that serve them. It sets out the principles, minimum requirements, and security measures needed to guarantee the confidentiality, integrity, traceability, authenticity, and availability of data and electronic services. The High category, the most demanding of the three the ENS defines, applies when at least one of these dimensions carries a high level of impact, and it requires certified organizations to pass periodic audits to maintain it.
‍

The certification, awarded by LGAI Technological Center, S.A. (Applus+), an ENAC-accredited certification body, confirms that Flexxible meets the full set of security measures this category requires. Three changes stand out: bringing on a specialized external service that monitors its systems around the clock (24/7) to detect and respond to incidents, automating identity and access management, and replacing its previous generic continuity plans with business continuity plans specific to each type of incident.
‍

This achievement adds to the ISO certifications the company already holds: ISO 27001:2022, ISO 27017, ISO 27018, ISO 27701, ISO 9001, and ISO 14001.
‍

"Reaching the High category of the ENS isn't a formality. It's a real shift in how we protect our clients' data and systems. We've invested in round-the-clock monitoring, automating controls that used to be manual, and having a specific response for every type of incident. We're not doing this to check a compliance box: we're doing it because it's what our clients need from a provider they trust with the security of their devices and their digital experience," states Alan Padilla, CISO of Flexxible.

‍

For Flexxible's clients, this certification means stronger data protection, faster response to threats, and greater assurance of service continuity and availability. The company has had no security breaches to date.

This announcement adds to other recent recognitions for the company: Flexxible has been included in the 2026 Gartner® Magic Quadrant™ for Digital Employee Experience (DEX) Management Tools for the third year running and in the 2026 Gartner® Magic Quadrant™ for Desktop as a Service for the fourth year running, making it one of only two European companies recognized in both reports. FlexxClient was also named a Momentum Leader in G2's Momentum Grid® Report for DEX, Fall 2026, a distinction based on verified customer reviews.

About Flexxible
Flexxible is a software company founded in Barcelona with operations in Spain, the United Kingdom, the United States, India, and Brazil. It specializes in managing and automating the digital workplace. Its solutions let organizations manage devices, support, security, and employee digital experience from a single, centralized platform. Today, its technology runs on close to a million devices worldwide. Flexxible holds ENS High category certification (RD 311/2022), ISO 27001:2022, ISO 27017, ISO 27018, ISO 27701, ISO 9001, and ISO 14001.