Security

Your business. Your data. Nobody else's.

Foxion is built for many businesses on one platform, so separation isn't a setting. It's how the database works.

Isolation

Every table, scoped to one business.

Each row belongs to a business, and the database itself refuses reads and writes from anyone outside it, whichever screen or API they use. We test this automatically with two businesses side by side.

Separation is enforced by the database on every table, and checked automatically with two businesses side by side.

What each role can do
Can…	Admin	Trainer	Client
Run the business, manage the team	Yes	No	No
Build programs, run sessions	Yes	Yes	No
See clients	All	Own, or all if switched on	No
Log workouts, check in, see their progress	No	No	Own data
Locations	All	Chosen locations	Their business

Access

Access that matches your org chart.

Three roles, plus per-person switches so a trainer can get exactly the reach they need.

Manage team
See all clients
Manage all clients
Manage all programs
Manage appointments
Edit exercise library
Manage integrations

Each person can be limited to chosen locations.

Sign-in

No shared logins. No borrowed passwords.

Invite emails
Staff and clients get an invite and set their own password. Nobody types one for someone else.
Separate doors
Staff sign in at app.foxionfit.com, clients at client.foxionfit.com. Each refuses the other.
Signed out after an hour idle
In the browser, an idle session ends after one hour.
Shut out at once
A deactivated account can't sign in, immediately.

Integrations

Signed, short-lived requests.

Calls between Blacksite and Foxion are signed with a secret that lives only on the servers and expire after five minutes. Connection codes work once.

How the integration works

Recoverable

Suspend, don't delete.

Suspending a business or a person shuts them out. Nothing is deleted. Reactivate and everything is where it was.

Questions about security? hello@foxionfit.com

Book a demo Explore the platform