Trust & security
You hold your clients' most sensitive financial data. OneFirmOS is built to protect it at every layer — encrypted, isolated per firm, and hosted in your region.
Most web apps put their login screen in front of the whole world. OneFirmOS puts a locked door in front of it.
Your firm's workspace lives at its own address, app.onefirmos.com. Before anything there reaches OneFirmOS, the Amazon Web Services load balancer asks the person to sign in at a separate gate. Only people on the allowlist get through: the active staff of active firms, and OneFirmOS's own support team.
Staff pass the gate with Google, Microsoft, or a 6-digit code emailed to them. Then they reach the normal OneFirmOS login, with their password and multi-factor authentication. Two separate locks, run by two separate systems.
That means bots, password-guessing scripts and strangers never see your firm's login screen at all. They only ever reach the gate, and the gate doesn't know them.
Google, Microsoft or an emailed code, checked by AWS against your firm's active staff list. Strangers stop here.
The staff member's own password, or your firm's Microsoft single sign-on.
A second factor on top, so a stolen password still isn't enough.
Only now does any firm data load, scoped by role and walled off from every other firm.
The allowlist updates on its own within minutes. Deactivate someone in OneFirmOS and they're locked out at the gate too. Nobody has to remember a second system.
The OneFirmOS server checks every staff request for the gate's signed pass, and that it belongs to the same person. Requests that skip the gate get nothing.
Bookmarks and emailed links to the app forward automatically to the gated address. Staff don't have to change how they work.
Your clients' portal, proposals, signing links and organizers work exactly as before. The gate is for your team only.
The controls that protect your firm's data, day one.
Sensitive fields are encrypted in the database, on top of AES-256 storage-level encryption across the platform.
All traffic is protected with modern TLS (1.3), so data is encrypted end-to-end between you and OneFirmOS.
Data and documents are hosted in-region — Canada (AWS ca-central-1) or the US — based on each client's location.
Every firm's data is walled off with database-enforced row-level security — one firm can never see another's.
Granular roles and permissions mean each team member sees exactly what their job requires — and nothing more.
Add a second factor to sign-in for stronger account protection against compromised passwords.
Your firm's login page sits behind a separate AWS sign-in gate, so only your active staff can even reach it. How it works.
Automated, encrypted backups run daily so your data can be recovered — with point-in-time restore.
Administrative activity is logged, and every e-signature carries a tamper-evident audit trail.
Signatures capture IP, device, timestamp and a document hash, with a downloadable signing certificate.
Our internet-facing systems have been assessed by an independent external security provider.
Credentials and tokens are held in a managed secrets store — never in code — with least-privilege access.
Configurable retention, legal hold and automated purge keep records exactly as long as compliance requires.
A public status page for real-time platform availability and incident history.
Organized the way a security team would review it. Expand any topic for specifics.
What's in place today, and what we're investing in next. We only claim what we actually do.
Book a walkthrough and we'll show you exactly how your firm's data is protected.