Security at OneLabs

What protects your account and data in One, who else handles your messages, and where our assurance stands.

Controls

• Passwords stored as salted scrypt hashes, revocable sessions, email verification and optional two-factor sign-in.
• HTTPS for all traffic between you and One.
• A separate workspace per account, and commands run in a sandbox.
• Per-message spending caps, and connected apps used only when you ask.
• Data export, memory you can see and delete, and account deletion in Settings.

Scope and assurance

One does not currently hold SOC 2 or ISO 27001 certification, and no external penetration test report has been published yet.