Controls
UpdatedEncryption key rotation enforcedPassing
Storage access restrictedPassing
Database connections encryptedPassing
Administrator access limitedPassing
Inactive accounts removedPassing
Mobile devices securedPassing
Backup processes establishedPassing
Security policies establishedPassing
Incident response policies establishedPassing
Secure development procedures establishedPassing
Vulnerability management procedures establishedPassing
Data classification policy establishedPassing
Data retention procedures establishedPassing
Encryption policy establishedPassing
Data collected
Customer personally identifiable informationCollected
Employee personally identifiable informationCollected
Credit card informationNot collected
Personal health informationNot collected
Subprocessors
Google Cloud PlatformCloud infrastructure and networkingCore product · US
GitHubSource control and continuous integrationEngineering · US
SlackInternal and customer communicationsCommunications · US
OpenAIAI-assisted toolingAI tooling · US
FAQ
How do I get access to restricted documents?Email josh@oneofone.ai and tell us who you are and which documents you need. Most requests are answered within one business day once an NDA is in place.
Where is infrastructure hosted?In Google Cloud Platform data centers. Specific regions are shared under NDA as part of a deployment agreement.
Is customer data encrypted?Yes. Customer data is encrypted at rest and in transit with TLS 1.2 or higher.
Updates
Trust center set upGeneral
Published 11 September 2026This page now shows our subprocessors, controls and the policies behind our systems, with our SOC 2 Type II audit in progress.