Your customers' data, under your control.
OfficOne holds the details of every customer you have. This page explains, in plain words, how the product protects that data and what you control — no badges, just what it does.
Decide how your team signs in.
Workspace admins set these rules in Settings → Security. They apply to everyone in the workspace.
Two-step sign-in
Codes from an authenticator app, plus one-time recovery codes for a lost phone. Admins can require it for admins only or for everyone.
Session length
Choose how many days people stay signed in before they must sign in again.
Sign-out after inactivity
End sessions that sit idle for longer than the minutes you set — useful on shared counters and front desks.
IP allowlist
Allow sign-in only from your office or VPN addresses. IPv4 and IPv6, single addresses or ranges.
Sign-in methods
Allow a password, a one-time code by email, or both — and switch either off for the whole workspace.
Password policy
Set a minimum password length for everyone. Passwords are stored only as bcrypt hashes, never in readable form.
Invite domains
Limit invitations to your company's email domains so nobody adds a personal address by mistake.
Sign people out
See every active session in the team, sign out one session or everything a person has open, and reset someone's two-step sign-in.
Your workspace is yours alone.
Separate by design
Every record — contacts, messages, invoices, tickets — belongs to exactly one workspace, and every request is checked against it.
On your own address
Your workspace runs on its own subdomain, or on your domain with an SSL certificate issued automatically. Sign-in sessions belong to that address.
Secrets sealed
Mailbox passwords, WhatsApp and SMS credentials, payment gateway keys and social tokens are encrypted with AES-256-GCM before they are stored.
Everyone sees what they need. You see who did what.
Give each person a role — ready ones for managers, sales, marketing, support, billing and accounting, or your own built permission by permission. A role can never grant a module your plan doesn't include. Every important change is written to the audit log with who did it, when and from which IP address.
- Permissions per module: view, edit, delete, export, approve
- Choose whether people see only their own records or everyone's
- Audit log of changes to people, roles, settings and data exports
- Sign-in history: sign-ins, password and two-step changes, with IP address
Phones you can sign out from anywhere.
A phone is paired from a signed-in browser by scanning a QR code. The code works once and expires after five minutes, and you get a notification the moment a new device signs in to your account.
One-time pairing
QR or 8-character code, valid for 5 minutes.
See every device
Name, platform, last seen and last IP address.
Sign out remotely
Yourself, or any device in the team if you're an admin.
Connections that can't do more than you allow.
API keys
- Scoped. Pick exactly which permissions a key has. Keys can never manage the team, roles, domains, settings, integrations or the audit log.
- Never more than their creator. A key only has the access its creator has today. Change their role or switch them off, and the key follows.
- Rate limited. 300 requests a minute per key.
- Stored as a hash. The key is shown once when it's made; after that only a fingerprint is kept. Set an expiry date, see when it was last used and from where, revoke it any time.
Webhooks & outgoing calls
- Signed. Each delivery carries a timestamped signature so your system can reject forged or replayed calls.
- Private networks blocked. OfficOne refuses to call addresses inside private, loopback or cloud-metadata ranges, requires https, and never follows redirects.
Your data is yours — to take, to erase, or to delete.
Export, erasure, retention and deletion live in Settings → Privacy, and each one is recorded in the audit log.
Export everything
An admin can export the whole workspace as a ZIP — one CSV per table. Passwords, keys and connection secrets are left out. The download link lasts 7 days.
Erase a person on request
Remove someone's personal data: conversations, marketing history, timeline and consent records are deleted. Invoices and tickets stay because tax law and support history need them — but the name and link to the person are removed.
Retention you choose
Keep activity history for as long as you need — from 90 days up to 10 years — or keep everything. Older history is cleared daily.
Delete the workspace
Only the owner can, with a typed confirmation. You have 30 days to change your mind and restore it; after that it is deleted with everything in it.
Consent & unsubscribe records
Marketing keeps a record of each opt-in and opt-out with its source and time, honours one-click unsubscribe, and maintains a suppression list automatically.
Your privacy policy
Add a link to your own privacy policy in settings so the people you collect data from can find it.
When we help, you can see that we did.
Sometimes the quickest way to answer a question is to look. OfficOne staff can only open your workspace with a stated reason, for one hour at a time — and it shows in your audit log.
- 1
A reason is required
Staff can't open a workspace without writing why. The reason is logged.
- 2
One hour, then it ends
The support session expires after an hour and is marked as support while it's open.
- 3
Written to your audit log
“OfficOne support signed in to help” appears in your own log, with the time.
Security questions, answered plainly.
Have a security review or questionnaire to complete? Send it over and we'll answer it.
Contact usCan OfficOne staff see our data?
Is our data kept apart from other businesses?
How are passwords and connection details stored?
Can we stop someone using an API key after they leave?
Do you have ISO or SOC 2 certification?
How do we get all our data out?
Set it up the way your business needs.
Create a workspace, turn on two-step sign-in, and invite your team with the right roles from day one.
All your Business. One Platform.