Security at OneWorkspaceX
We take security seriously. Your data is protected with enterprise-grade security measures.
Data Encryption
All data is encrypted in transit using TLS.
Access Control
Role-based access control across every module, with a single sign-on for your whole workspace.
Monitoring
24/7 security monitoring and automated threat detection to keep your data safe.
How the Product Protects Your Data
• API tokens are stored only as hashes and shown once. A token — including one issued to an AI tool through Studio — can never do more than the person who created it.
• Stored credentials, such as your AI model key and import credentials, are encrypted at rest and can never be read back through the product.
• Automation uses a GitHub App with access tokens that expire within an hour; GitLab and Bitbucket tokens are stored encrypted and never shown again. The agent never sees them, and Automation never pushes to your main branch.
• Outbound webhooks are signed, and webhook destinations are checked so they cannot be pointed at internal network addresses.
• Rich text is sanitized before it is stored, and issue attachments are always served as downloads, never rendered in the browser.
• Requests from Slack, Discord, Microsoft Teams and Google Chat are verified against each platform's signature before anything is created.
Security Practices
• Regular security audits and penetration testing by third-party security firms
• Automated vulnerability scanning and patch management
• Secure development lifecycle with code reviews and security testing
• Data backup and disaster recovery procedures
• Employee security training and background checks