Legal
Security and trust
Protecting customer data is foundational to everything we build. Security at every layer: infrastructure, encryption, access controls, and tenant isolation.
At a glance
- Where your data lives
- Amazon Web Services (AWS)
- Encryption
- In transit and at rest
- Backups
- Daily, kept 7 days
- Your data
- Never sold
How we protect your data.
Infrastructure
Everything runs on Amazon Web Services (AWS). We're part of AWS Activate, Amazon's program for startups.
Our AWS Startup Showcase profileWebsite on AWS Amplify · backend in Docker containers
Encryption
Your data is encrypted while it travels over the internet and while it is stored.
TLS 1.2+ in transit · AES-256 at rest for databases and files
Each company kept separate
Every request is checked against the company it belongs to, so no one can see another company's data.
Application-level multi-tenancy · every query scoped by company
Sign-in
Passwords are never stored as plain text, email addresses are verified, and sessions renew securely in the background.
PBKDF2 password hashing · JWT sessions in httpOnly cookies · refresh tokens
Backups
Your data is backed up automatically every day and kept for 7 days, and it can be restored to any point in that time.
Daily Amazon RDS snapshots · 7-day retention · point-in-time recovery
Access controls
Admins decide which modules each team can use, and what each person can see and do.
Three layers: module on → user role → user permission
Compliance
We follow the principles of India's Digital Personal Data Protection Act and GDPR, and we never sell customer data.
Aligned with DPDP and GDPR principles · not certified yet
Audit logs
Admins can see who did what and when: user actions, data access and settings changes.
Company-level audit log · filterable by admins
Services we use
A small set of trusted services help us run Oneintelligent and handle data on our behalf.
AWS and Amazon RDS (hosting, database) · OpenAI (AI features) · Microsoft (email via Microsoft Graph; Clarity masked usage replays) · Google (analytics, maps) · Razorpay (payments, coming soon)
Reporting a problem
Report security concerns to support@oneintelligent.ai. We have a set process for handling them.
What we run on.
The main technology behind Oneintelligent, and where each part runs.
| Layer | Technology |
|---|---|
| Website and app | Next.js, React, TypeScript |
| Backend | Django, Django REST Framework, FastAPI (served by Gunicorn and Uvicorn) |
| Background and scheduled jobs | Celery, with Celery Beat for schedules |
| Database | Amazon RDS PostgreSQL, with pgvector for AI search |
| Cache and job queue | Redis |
| File storage | Amazon S3 |
| AI | OpenAI models, through our own AI service (FastAPI) |
| Microsoft Graph | |
| Notifications | Web Push (browser notifications) |
| Maps | Google Maps |
| Analytics | Google Analytics, Microsoft Clarity |
| Payments | Razorpay (coming soon) |
| Hosting | AWS Amplify (website), Docker containers behind nginx on AWS (backend) |
| Monitoring | Amazon CloudWatch |
Report a security concern
Found something that looks wrong? Email support@oneintelligent.ai with what you saw and how to reproduce it.