Last reviewed October 29, 2026
Trust center
How we secure onebee, the reports and policies behind it, and who we share data with. Request what you need for your review and we'll send it over.
SOC 2 Type I report
Independent auditor's report from Zero Day CPA, PC, as of August 31, 2026.
Information Security Policy
The security requirements for our applications, resources and tools, and who owns them.
Access Control and Termination Policy
How access is granted, reviewed every quarter, and removed when someone leaves.
Security Incident Response Plan
How we identify, prioritize, contain, communicate and resolve a security incident.
Business Continuity and Disaster Recovery Policy
Backups and how we restore the service after a disaster or disruption.
Change Management Policy
How changes are documented, tested and released to production.
Secure Development Policy
The requirements for building and maintaining software securely.
Vulnerability Management and Patch Management Policy
How we find vulnerabilities and fix them on deadlines set by severity.
Encryption and Key Management Policy
How we encrypt data and secrets and manage the keys.
Network Security Policy
How we protect systems and information within and across networks.
Data Classification Policy
How sensitive data is classified and handled.
Data Retention and Disposal Policy
How long customer data is kept and how it is deleted.
Risk Assessment and Treatment Policy
How we assess threats, likelihood and impact, and track what we do about them.
Vendor Management Policy
How we vet, contract with and review the vendors we rely on.
Configuration and Asset Management Policy
How new applications, resources and tools are configured and tracked.
Acceptable Use Policy (employees)
The rules our own team follows for company devices, systems and data.
Data Processing Addendum
Incorporated into our Terms by reference. Annex 3 lists every sub-processor.
Agent control map
Threats, the control on each, and the evidence, mapped to common frameworks.
Restricted documents are shared after we review your request. Approved requests get a download link by email.
Security review
Have a questionnaire or want to walk through it live?
We'll fill in your questionnaire and go through the architecture with your security team.