Security built into every layer

Oneprofile can hold your CRM records, billing history and support tickets at once. It encrypts all of it in transit and at rest, runs on Google Cloud, and scopes every request to your organization.

Get started free

Talk to sales

No credit card required

Free 200 credits every month

Get started free

Talk to sales

No credit card required

Free 200 credits every month

Get started free

Talk to sales

No credit card required

Free 200 credits every month

Security controls you manage

Oneprofile gives your team the tools to enforce your organization's security policies directly in the product.

Two devices signed in to one organization's workspace

Organization isolation

Every table, integration, and run is scoped to your organization. A request can only read and write inside the organization it belongs to, enforced on every API call.

A list of API keys, with the active ones checked

API keys you control

Create API keys with optional expiry dates and revoke them at any time. Objects created through a key carry its name, so you can always see what came from where.

Audit log table with a search box, one row per change

Audit logs

Changes to integrations, sequences, senders and table columns are logged with who made them and when.

Connected tools listed, with one failing connection flagged

Credential validation

Oneprofile validates API credentials on connect and alerts you if a credential expires or is revoked. A dead CRM token surfaces as an alert, not as a write-back that quietly stopped.

Infrastructure security

Oneprofile runs on Google Cloud Platform with encryption at every layer. We follow least-privilege access principles and regularly review our security posture.

Encryption everywhere

All data is encrypted in transit with TLS 1.2+ and at rest with AES-256, integration credentials included. After setup, a credential’s value is never shown again.

Network isolation

Production systems run in isolated VPCs with strict ingress/egress rules. Internal services communicate over private networks only.

Monitoring and alerting

Automated monitoring detects anomalies in real time. Security events are logged, reviewed, and escalated through defined incident response procedures.

Data residency

Oneprofile runs on Google Cloud infrastructure. Contact us to discuss data residency requirements for your organization.

Compliance

Oneprofile meets the data privacy and compliance requirements that security-conscious teams expect.

GDPR

Oneprofile processes data in accordance with GDPR requirements. A Data Processing Agreement is available for all customers on request.

CCPA

Oneprofile respects California Consumer Privacy Act requirements. You can request data access and deletion at any time. We never sell customer data.

Data privacy

Oneprofile stores the prospects and accounts you load so we can enrich them, you can review results before write-back, and run history stays searchable. Table data is kept until you delete the table or disconnect the integration, and run history follows your plan’s retention period. When the waterfall queries a data provider, it sends only the lookup fields that provider needs, not the rest of that contact’s data.

We do not sell, share, or use customer data for any purpose beyond providing the service.

Yes. The prospects and accounts you load are stored so we can enrich them, you can review the results, and write-back can push them to your CRM. Table data is kept until you delete the table or disconnect the integration. Run history follows your plan's retention period.

Credentials are encrypted at rest with the rest of your data. After setup, Oneprofile shows only whether each credential is set, never its value.

Yes. Contact support@getoneprofile.ai and we will provide a DPA that covers GDPR and standard contractual clauses.

Yes. If you discover a security vulnerability, report it to support@getoneprofile.ai. We investigate all reports and aim to respond within 48 hours.

Oneprofile does not hold HIPAA certification. Contact support@getoneprofile.ai to discuss healthcare data requirements.

Production access is restricted to a small number of engineers with a business need. Access is time-bound, logged, and reviewed regularly.

Ready to get started?

Get started free

No credit card required

Free 200 credits every month

455 Market Street, San Francisco, CA 94105