How Flashpoint Secured a Distributed Investment Firm with JumpCloud and Cloudfresh

When your team is spread across London, New York, Tel Aviv, Budapest, Warsaw, Riga, and Nicosia, the way you think about IT has to match the way you actually work. For Flashpoint, that meant going all-in on cloud and SaaS from day one and eventually asking harder questions about what it takes to keep that environment secure.

Going Cloud-First Across Seven Offices

Being a cloud-first organization is a choice you make on purpose. For Flashpoint, it’s what keeps a seven-office investment firm running without the weight of self-hosted infrastructure.

Running a multi-office financial firm on a cloud-first stack comes with a real trade-off, though. Flashpoint runs entirely on SaaS and cloud services such as Google Workspace and holds no self-hosted infrastructure. That’s the setup that keeps the business agile across seven global offices. It’s also the setup that puts identity squarely at the center of every security conversation.

The team was relying on Google Workspace accounts as the primary authentication layer, but this left meaningful gaps. Multi-factor authentication was technically enforced, but the 14-day lockout flow in Google meant users would get locked out rather than guided through setup. Onboarding and offboarding new team members required manual work across multiple systems. And with no unified view into device health across the fleet, IT had limited visibility into what was actually running on employee machines.

Identity First, Devices Second

Flashpoint brought in JumpCloud, implemented with the support of Cloudfresh, to address identity management and device security across its distributed workforce. Because JumpCloud and Google Workspace are technology partners, the two platforms work natively next to each other, which made the move away from a Google-only authentication model far less disruptive than it could have been.

Identity and Access Management

JumpCloud’s self-service portal gave users a far more controlled experience for managing their own accounts. More importantly, JumpCloud MFA has replaced the blunt force of Google’s lockout flow with a guided setup process and walks users through the JumpCloud Protect Authenticator without getting cut off mid-process. Everyone’s properly set up now, and not just technically forced to comply.

On the IT side, the impact was just as direct. Flashpoint built User Lifecycle Management workflows around JumpCloud using SCIM provisioning, so when a new team member joins or leaves, roughly 80% of the account management work happens automatically. That’s a significant drop in manual overhead for a team operating across multiple time zones. Directory Insights gives IT a full audit trail of user activity across the environment, so nothing goes unnoticed.

Device Management

JumpCloud MDM/Device Management gave Flashpoint’s IT full visibility into the device fleet. Endpoint protection agents are now deployed centrally, and System Insights™ provides real-time telemetry on device health and software usage so the team can catch anything that falls outside approved tools before it becomes a problem. Remote Access™ handles helpdesk support without needing a separate tool. Windows enrollment has been smooth; Apple device enrollment is in progress.

What Changed on the Ground

JumpCloud addressed the core security gaps Flashpoint had been working around. Here’s what looks different today.

What’s Next for Flashpoint

With identity and device management on solid footing, Flashpoint’s next focus is SaaS and AI governance. The firm uses a wide range of cloud tools and AI services across its investment teams, and the priority is getting proper visibility and control over what data is going where. Specifically, Flashpoint wants to make sure teams are working within enterprise-grade AI environments that don’t expose sensitive information.

Down the line, JumpCloud’s agent management capabilities could also extend to governing AI systems within the organization. And that’s an area Flashpoint is watching closely, given its focus on keeping human oversight central to all investment decisions.

A Partnership Built on Follow-Through

Cloudfresh is a JumpCloud Platinum Partner and an official Google Cloud Premier Partner, which matters a lot here, because making the two platforms talk to each other properly was exactly what Flashpoint needed. That cross-platform expertise is what Cloudfresh brought to the table, together with the kind of hands-on support that doesn’t disappear after go-live.

For Flashpoint, the relationship continues. As the firm moves toward SaaS and AI governance, Cloudfresh is already part of the conversation, not as a provider that showed up for the implementation, but as a partner that stays in the room as the roadmap evolves.