Flexco
United States · www.flexco.com · 12 vendors
Flexco is a leading global manufacturer of mechanical conveyor belt fasteners, belt maintenance tools, and endless splicing systems. The company provides products and solutions designed to enhance the productivity, safety, and uptime of belt conveyor systems across various industries worldwide.
Resilience scores
- Digital Sovereignty: 75
- Digital Resilience: 6
- Financial Resilience: 7
Technology vendors
- Google LLC — Technology — United States
- HubSpot, Inc. — Technology — United States
- IST Group AB — Other — Sweden
- and 9 more
Insights
Last updated 2026-08-16 · revision 2
12 direct vendors, 194 subvendors
Direct vendors by controlling owner country (sample)
- Denmark: 1
- Sweden: 1
- France: 1
Subvendors by controlling owner country (sample)
- Luxembourg: 1
- Denmark: 4
- United Kingdom: 4
Migration Readiness: 4/10
Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.
Flexco's migration readiness is assessed as medium, leaning towards the lower end, primarily due to the explicit presence of a 'Legacy Recruiting/Job Board (UltiPro (UKG))' within its internal tech stack, indicating a need for modernization. Critical information regarding regulatory compliance requirements, data residency constraints, and financial stability (which impacts the ability to fund a migration) is not provided, making a full assessment difficult. There is no explicit mention of cloud-native architectures, containerization, or microservices in their internal tech stack, suggesting a potentially traditional infrastructure that would require significant effort to migrate to modern cloud environments. The vendor landscape, while showing some geographic diversity (3 unique countries), has an unknown vendor lock-in risk. The provided data states 'Total Vendors: 0' which contradicts the existence of services and vendor geographic data, making it difficult to assess the true vendor concentration and potential lock-in challenges. On the positive side, Flexco's 'Elevate® Digital Solutions' product line demonstrates an adoption of IoT technology, which might indicate an internal capability or willingness to embrace modern digital solutions, potentially easing some aspects of a future migration.
Compliance
8 in-scope frameworks identified; showing 3.
Illinois BIPA — Assessment Required
Flexco is headquartered in Downers Grove, Illinois, and likely has manufacturing facilities in Illinois. The Illinois Biometric Information Privacy Act (BIPA, 740 ILCS 14) is one of the strictest biometric privacy laws in the US and applies to private entities that collect, capture, purchase, receive, or otherwise obtain biometric identifiers or information (fingerprints, retina scans, facial geometry, voiceprints, hand scans) from Illinois residents. Manufacturing facilities commonly use biometric time-and-attendance systems, access control systems, and safety equipment that may capture biometric data from employees. BIPA carries a private right of action with statutory damages of $1,000–$5,000 per violation, making it a significant litigation risk. Risk is Medium because: (1) manufacturing facilities commonly use biometric systems; (2) BIPA litigation against manufacturers is well-documented; (3) Flexco's Illinois HQ and likely manufacturing presence creates direct exposure; (4) however, it is unconfirmed whether Flexco uses biometric systems.
Evidence: https://www.ilga.gov/legislation/ilcs/ilcs3.asp?ActID=3004&ChapterID=57, https://www.flexco.com/NA/EN/Flexco/Footer-Links/Privacy-Policy.htm
SOC 2 (source) — Assessment Required
Flexco has launched digital/cloud-connected products under its 'Elevate®' brand (Elevate® Smart Cleaners, Elevate® Belt Rip Prevention) and a 'Connectivity Dashboard' for its Novitool® Aero® Splice Press. These are IoT/SaaS-type digital solutions that collect operational data from customer equipment. If these platforms process customer data in the cloud (hosted on Microsoft Azure per the privacy policy), enterprise customers — particularly in regulated industries like pharmaceuticals, food processing, and mining — may require SOC 2 Type II reports as part of vendor due diligence. Additionally, Flexco's Distributor Portal and FlexFirst service partner network involve digital data exchange. Risk is Medium because: (1) Flexco is primarily a hardware manufacturer, not a cloud service provider; (2) the digital solutions appear to be an emerging/growing part of the business; (3) enterprise B2B customers in regulated sectors increasingly require SOC 2 from technology vendors; (4) no SOC 2 report has been publicly disclosed, which could be a competitive and contractual risk.
Evidence: https://www.flexco.com/NA/EN/Flexco/Products/Endless-Splicing-Systems/Connectivity-Dashboard.htm, https://info.flexco.com/en-us/flexco-elevate, https://www.flexco.com/NA/EN/Flexco/Footer-Links/Privacy-Policy.htm, https://www.aicpa-cima.com/resources/landing/system-and-organization-controls-soc-suite-of-services
CPRA — Assessment Required
Flexco is headquartered in Illinois and operates across the United States. The California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), applies to for-profit businesses that: (1) have annual gross revenues exceeding $25 million; (2) buy, sell, or share personal information of 100,000+ California consumers or households annually; or (3) derive 50%+ of annual revenues from selling personal information. Given Flexco's global scale (150+ countries, 12 subsidiaries), it is probable that at least one of these thresholds is met, particularly the revenue threshold. The company collects personal data via its website, HubSpot CRM, and distributor portal from California-based customers, distributors, and employees. Risk is Medium because Flexco is a B2B manufacturer (not a consumer-facing business processing large volumes of California consumer data), but the revenue threshold likely applies.
Evidence: https://www.flexco.com/NA/EN/Flexco/Footer-Links/Privacy-Policy.htm, https://oag.ca.gov/privacy/ccpa, https://cppa.ca.gov/
Financials
Three-year financials
- 2024:
- 2023:
- 2022:
Financial Resilience Score: 7/10
Flexco is a privately held US company founded in 1907, with over 115 years of continuous operations, which strongly suggests durable cash generation and disciplined ownership. The company benefits from diversified end markets including mining, aggregates/cement, ports & terminals, grain/agriculture, food processing, parcel handling, airports, warehousing, wood/pulp & paper, and recycling, which materially reduces cyclical concentration risk versus a pure-play mining supplier. Its consumable/aftermarket product mix (belt fasteners, cleaners, splicing supplies) tied to installed conveyor bases historically produces recurring revenue that is less capex-cyclical than OEM equipment sales. Global diversification across 12 subsidiary locations and customers in 150+ countries limits regional dependence, and long-tenured private ownership typically implies a conservative balance sheet. However, no audited financial statements, SEC filings, or investor disclosures are publicly available, which limits external visibility. Key risks include commodity-cycle exposure through mining and cement customers, raw material input sensitivity (steel and rubber), FX translation risk from heavy international operations, and competition from larger diversified players such as ContiTech, Fenner/Michelin, Martin Engineering, and Superior Industries. Overall the qualitative profile supports above-average resilience, but the absence of primary financial disclosure prevents a higher confidence score.
Key strengths: Over 115 years of continuous operations (founded 1907), Diversified end markets across mining, cement, ports, food, logistics, agriculture, recycling, Global footprint with 12 subsidiaries and customers in 150+ countries, Consumable/aftermarket product mix tied to installed conveyor bases (recurring revenue profile), Long-tenured private/family ownership implying conservative balance sheet, Strategic expansion into digital/IoT (Elevate® platform) and services (FlexFirst™)
Risk factors: Commodity-cycle exposure via mining, coal, iron ore, copper, and cement customers, Input cost sensitivity to steel and rubber/elastomer pricing, FX translation risk from heavy international operations, Competition from larger diversified players (ContiTech, Fenner/Michelin, Martin Engineering, Superior Industries), Limited financial disclosure/opacity as a private company
Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.