Red Flags Workbench & Server
HMX.ai · Finance & Accounting
Certification per Microsoft Marketplace.
Evidence tier Source Confirmed · 7 captures on record
What the publisher says
As described on Microsoft Marketplace.
Two important capabilities are available to users of the CRex(TM) software: (1) the Red Flags Server, and (2) the Red Flags Excel Workbench Add-in. The Red Flags Server is an Azure service that enables you to define critical risk signals to monitor and maintain a database of red flags that occur based on data in a database or incoming message flow. The Red Flags Server is an HMX.ai CRex (Cognitive Reasoning Engine) Enterprise application. The Red Flags Excel Workbench Add-in applies the HMX.ai CRex Add-in for Excel, which is free to download from Microsoft AppSource. Both the Red Flags Server and Excel Workbench have the following key features:
- Goal-Oriented - Define your organization's goals most relevant to managing compliance and transparency.
- Situation-Centric - Define the critical situations that your organization wants to track to determine the best actions to take.
- Cognitive Maps - Organize goals and situations in a graphical way to represents your red flags management plan.
- Simulation Scenarios - Run simulations for what-if scenarios to see the results and fine-tune your management plans.
- CoPilot Integration - Investigate how decisions impact organizational goal achievement and situational awareness with natural language Q&A.
Preview
2 imagesAgent build and provenance
See the full provenance
The layer-by-layer build, the evidence behind each claim, the risk basis and the cross-marketplace links are open to any account. Some rows are disclosed, some the source leaves Unknown; a free account shows you which.
Compliance
- FedRAMPConfirmedNot listed90%, registry-checkedNo FedRAMP Marketplace entry matched this vendor's domain, checked 2026-08-27registry recordas observed 2026-08-27
Confirmed means matched to a public authoritative registry. Claimed means the vendor or its listing states it, not yet cross-checked. A framework not shown was not found in any source we hold, which is not evidence against it. Not listed means a scoped registry check found no match for this vendor's domain: a No is a scoped registry check, not a compliance judgment. Confidence bands: 95% domain-verified, 90% registry-checked, 80% self-attested, 70% weak signal. Self-attested items marked “vendor's site” are gathered from the vendor's own website and are not verified by us.
Sources
Publisher resources
4 linksLinked repositories
Unknown means this listing does not publish a repository. It is not a statement that the code is closed, and a linked repository is not a claim that the publisher wrote it: the registry computes that relationship privately and does not publish it.
Evidence risk is the share of the build you cannot see before you deploy, not a security rating. Sign in to see the layer-by-layer basis for this band.

