Our Security Commitment
At OneNoughtOne, security is fundamental to everything we do. We are committed to protecting your data and maintaining the trust you place in us. This page outlines our security practices, measures, and your role in keeping your account secure.
We continuously invest in security improvements and stay up-to-date with the latest security best practices and emerging threats.
Data Protection
Encryption at Rest & in Transit
All data is encrypted using AES-256 at rest and TLS 1.3 in transit.
Our data protection measures include:
- End-to-end encryption for sensitive data transmission
- Encrypted database storage with automatic key rotation
- Secure backup systems with encrypted storage
- Regular security audits and penetration testing
- Data minimization—we only collect what we need
Infrastructure Security
Enterprise-Grade Infrastructure
Hosted on Vercel with SOC 2 Type II compliance.
Our infrastructure is designed with security in mind:
- Hosted on enterprise-grade cloud infrastructure
- Distributed denial-of-service (DDoS) protection
- Web Application Firewall (WAF) protection
- Automatic security updates and patching
- Geographic redundancy for high availability
- Network isolation and segmentation
Authentication & Access Control
Secure Authentication
Industry-standard OAuth 2.0 with secure session management.
We implement robust authentication measures:
- Secure password hashing using bcrypt with strong salt
- OAuth 2.0 integration with trusted providers (Google, GitHub)
- Session tokens with automatic expiration
- Protection against brute force attacks
- Secure password reset procedures
Security Monitoring
24/7 Monitoring
Continuous monitoring for threats and anomalies.
Our security monitoring includes:
- Real-time threat detection and alerting
- Automated anomaly detection
- Comprehensive logging and audit trails
- Regular log analysis and review
- Incident response procedures
Vulnerability Reporting
Responsible Disclosure
We appreciate security researchers who help keep our platform safe.
If you discover a security vulnerability, please report it to us responsibly:
- Email security issues to: security@onenoughtone.com
- Include detailed steps to reproduce the vulnerability
- Allow reasonable time for us to address the issue
- Do not access or modify other users' data
- Do not perform actions that could harm our users or service
We are committed to working with security researchers and will acknowledge valid reports promptly.
Security Best Practices for Users
Protect Your Account
Follow these recommendations to keep your account secure.
Help keep your account secure by following these best practices:
- Use a strong, unique password for your account
- Never share your password or account credentials
- Be cautious of phishing attempts—we will never ask for your password via email
- Keep your devices and browsers updated
- Log out from shared or public computers
- Review your account activity regularly
- Report any suspicious activity immediately
Contact Security Team
For security-related inquiries or to report a vulnerability, please contact our security team:
- Security Issues: security@onenoughtone.com
- General Inquiries: support@onenoughtone.com
For urgent security matters, please include "URGENT" in your email subject line.