Skip to main content
Security & trust

The information you trust us with, protected.

OneSpot holds the decisions, records, and resources your organization runs on. We treat that responsibility plainly: encrypt it, control access to it, and keep an honest record of what changed.

The fundamentals

Protection where it counts.

Encrypted in transit and at rest

TLS protects information as it moves between your people and OneSpot. Data is encrypted at rest on our infrastructure.

Role-based access

Access follows four roles — Executive Director, Moderator, Member, and Viewer — each with a real permission set enforced on every action, in every module.

Immutable audit log

Every admin action is recorded to a log that can't be quietly edited. When something changed and who changed it is always answerable.

Tenant-isolated by design

Each organization's space is separated. Cross-organization sharing happens only through explicit, revocable shares — never by accident.

How we think about insight.

OneSpot shows leaders whether important information landed — read receipts, what’s being missed, where a follow-up is needed. It exists to close communication gaps for the people you’re speaking to, and to help a leader listen at scale. It is not built to monitor individuals, and admin access to that data is itself recorded in the audit log.

Accessibility

Built to WCAG 2 AA.

Information that people can’t perceive isn’t accessible in any sense that matters. Accessibility is built into the product from the start.

  • Colour contrast that meets AA on light and dark themes
  • Visible focus states for keyboard navigation
  • Labelled controls for assistive technology
  • Honoured reduced-motion preferences
  • Your brand colour run through an accessibility-checked palette
FAQ

Trust, in plain terms

Where is our data, and who can see it?

Your organization's information lives in its own tenant space, encrypted at rest. Access is governed by your roles and group permissions. Cross-organization visibility only happens through shares you explicitly create and can revoke.

Is the engagement insight a form of surveillance?

Insight is about listening to understand — it answers “did this land, and where should we follow up?”, in service of the people you're communicating with. It is not built to monitor individuals, and admin access to it is itself recorded in the audit log.

Can we get your privacy and security documentation?

Yes. Detailed privacy and security information is available on request — reach us at hello@onespotaccess.com.

How accessible is OneSpot?

OneSpot is built to WCAG 2 AA: colour contrast, visible focus states, labelled controls, and honoured reduced-motion preferences are built in from the start. Your brand colour is run through an accessibility-checked palette so custom branding stays legible.

v0.3

Want the details?

We're happy to share our privacy and security documentation. Or open the live demo and see it for yourself.

  • Every module live
  • No account required
  • Bring your brand colour