CMS

FlexCMP

FlexCMP is an Italian content management system and digital experience platform developed since 2000 and now published by Deda Digital s.r.l. in Bologna, part of Dedagroup. It is widely used for Italian public administration websites as well as company sites and B2B or B2C shops. It runs on the site's own server and only sets technical cookies, including a built-in consent module, so the CMS itself does not require consent.

Block FlexCMP until consent Scan my site

Overview

What does FlexCMP do?

What is FlexCMP?

FlexCMP is a content management system created in Italy. The copyright notice of the application server dates it back to 2000. It was the main product of the Italian software house Idea Futura, which joined the Dedagroup ICT network in 2014, and it is now published by Deda Digital s.r.l., based in Bologna. Despite the acronym CMP in its name, FlexCMP is not a consent management platform: the vendor presents it as a digital experience platform (DXP) for managing websites, intranets, mobile apps and e-commerce. A specific offering targets Italian public administrations, with templates that follow the national web design guidelines for accessibility and transparency.

How FlexCMP appears on a website

Technology scanners recognise FlexCMP through the meta generator tag "FlexCMP", the X-Powered-By header that reads "FlexCMP Application Server" with its version number, and custom headers such as X-Flex-Lang. Pages are generated by the platform on the site's own server, written in PHP, and static resources are served from the same domain under paths like /flex/. FlexCMP does not itself load scripts from an external domain; any analytics, maps or video players are added separately by the site owner.

Cookies and personal data

On the vendor's own site, FlexCMP sets a PHPSESSID session cookie, an fxs cookie lasting one year and, once the visitor has made a choice in the built-in privacy dialog, an fx-eu-privacy cookie that records it. These are technical cookies. Editors' and users' accounts, forms and newsletter features handled by the platform process personal data stored on the server chosen by the site owner.

GDPR and consent

The CMS itself does not require consent. Its session and preference cookies are needed to deliver the site and remember the consent choice, which falls under the strictly necessary exemption of Article 5(3) of the ePrivacy Directive and of the Italian Garante cookie guidelines. The site owner remains the controller; Deda Digital acts as processor when it hosts or maintains the installation. Consent is needed for the third-party tools added to the pages.

Practical steps

List the cookies actually set by your installation, as they depend on the version and modules used.
Use the built-in EU privacy module or a dedicated CMP to block analytics and marketing tags until consent.
Sign a data processing agreement with Deda Digital if it hosts or maintains your site.
Keep the platform updated and restrict access to the editorial back office.

Compliance

FlexCMP and the GDPR

Legal basis: Legitimate interest (Art. 6(1)(f) GDPR); technical cookies exempt from consent as strictly necessary (Art. 5(3) ePrivacy Directive)
Risk level: low
Applicable regulations: GDPR, ePrivacy Directive, Italian Privacy Code (D.Lgs. 196/2003), Garante cookie guidelines (2021)

Impact assessment (DPIA)

A DPIA is not usually required for the CMS itself, which mainly processes technical data and editors' accounts. One may be needed depending on what the site collects through forms, reserved areas or public services for citizens. Check the hosting location, the processor agreement with Deda Digital and how third-party scripts are blocked before consent.

Sample text for your banner

This website is built with the FlexCMP content management system, which uses only technical cookies to run the site and remember your privacy choices. Other cookies, for statistics or third-party content, are only set with your consent.

Cookies and trackers

What FlexCMP sets and contacts

Tracking method: Content management platform running on the website's server, detected through the meta generator "FlexCMP", the X-Powered-By: FlexCMP Application Server header and X-Flex-* headers.
Server location: Depends on the deployment (on-premises or hosted by Deda Digital in Italy); not publicly documented per site

Cookies set (3)

Name	Type	Duration	Purpose
PHPSESSID	necessary	Session	PHP session identifier set by the FlexCMP application server to keep the visitor's session (observed on flexcmp.com, HttpOnly, SameSite=Strict).
fxs	necessary	1 year	Platform cookie set by the FlexCMP application server on every visit (observed on flexcmp.com, HttpOnly). Its exact purpose is not publicly documented by the vendor.
fx-eu-privacy	necessary	Not publicly documented	Stores the visitor's choices in FlexCMP's built-in EU cookie consent module, so that the consent dialog is not shown again.

Questions

Frequently asked questions about FlexCMP

Can't find your question? Write to us, we answer fast.

Write to us

Is FlexCMP a consent management platform?

No. Despite the letters CMP in its name, FlexCMP is a content management system and digital experience platform. It does include a module that displays a cookie consent dialog and stores the choice in an fx-eu-privacy cookie.

Who develops FlexCMP?

FlexCMP is published by Deda Digital s.r.l., based in Bologna, Italy, a company of Dedagroup. The product was originally developed by Idea Futura, which joined Dedagroup in 2014.

Which cookies does FlexCMP set?

On the vendor's site we observed PHPSESSID (session), fxs (one year) and fx-eu-privacy (consent choice). They are technical cookies; the exact list depends on the version and modules of each installation.

Does a FlexCMP site need a cookie banner?

Not for the CMS's own technical cookies. A banner is needed as soon as the site uses analytics that are not anonymised, social media plugins, embedded videos or advertising tags.

How can I tell if a site uses FlexCMP?

Look at the page source for the meta generator tag "FlexCMP" or at the HTTP response headers, where X-Powered-By mentions the FlexCMP Application Server and its version.

Storyblok

Storyblok is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Storyblok integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Storyblok helps organizations maintain robust websites that meet user expectations and technical requirements.

CMS

Brizy

Brizy is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Brizy supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Brizy enables informed decisions that improve experience and drive results.

CMS

SixCMS

SixCMS is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. SixCMS integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, SixCMS helps organizations maintain robust websites that meet user expectations and technical requirements.

CMS

Labrador CMS

Labrador CMS is a powerful content management system (CMS) designed to help businesses and developers build, manage, and publish digital content with ease. It offers a flexible architecture that supports custom content types, templates, and workflows, making it ideal for websites of any scale. With Labrador CMS, teams can streamline content creation, improve collaboration, and deliver engaging web experiences. Its extensible plugin ecosystem and API-first approach ensure seamless integration with.

CMS

Skool

Skool is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Skool supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Skool ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

CMS

PixelFed

PixelFed is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. PixelFed supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, PixelFed ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

CMS

Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.

Create my banner Scan my site