Log in Get Started
Trust & Compliance

Trust and Compliance

Customer trust, information security and data privacy are at the heart of everything we do at OneIQ.

ISO/IEC 27001 certified (BSI)GDPR compliantAnnual penetration testingAgentless collectionAES-256 · SSL everywhereHosted on Azure Canada Central

Certification & Compliance

ISO/IEC 27001 certified, GDPR compliant, annual penetration testing and surveillance audits.

Read more

Application Security

Security is an integral part of our software development - agentless, encrypted, digitally signed.

Read more

Infrastructure Security

Hosted on Microsoft Azure Canada Central with extensive security capabilities and SSL everywhere.

Read more

Organizational Policies

Security screening, annual training, SSO with 2FA, and a dedicated Information Security Officer.

Read more

Certification and Compliance

ISO/IEC 27001

OneIQ maintains ISO/IEC 27001 Information Security Management certification through the British Standards Institution (BSI).

GDPR

OneIQ is committed to the General Data Protection Regulation (GDPR) (EU) 2016/679 and handles personal data in line with GDPR's data protection and privacy requirements.

Penetration Testing

OneIQ conducts application and infrastructure penetration testing annually through an independent third-party security firm.

Surveillance Audits

Each year OneIQ undergoes ISO/IEC 27001 surveillance audits with BSI to ensure continuous improvements to our information security management system (ISMS).

Application Security

Agentless

OneIQ does not deploy agents during data collection, avoiding any increase in the attack surface on target systems.

Secured Credentials

Passwords entered into the OneIQ Pulse data collector are encrypted using AES-256 and are never displayed in plaintext or transmitted externally.

Data Encryption

OneIQ encrypts inventory and performance data at the point of collection, in-transit and at-rest.

Digital Signatures

The OneIQ Pulse data collector is digitally signed to prevent tampering with embedded scripts and software assemblies.

Vulnerability Discovery

OneIQ performs web application and container image scanning to identify and mitigate security vulnerabilities on an ongoing basis.

Infrastructure Security

Microsoft Azure

OneIQ is hosted in the Canada Central (Toronto) region on Microsoft Azure, which provides extensive security capabilities including Azure Firewall and cloud storage with encryption-at-rest.

Communication Security

All inter-service communication and data transfers are performed over SSL. Zero-trust networking is enforced throughout, so a single compromised service is blocked from silently reaching the rest of your infrastructure.

Supplier Security

OneIQ has a rigorous onboarding process for new suppliers and conducts annual reviews of existing suppliers to ensure they maintain rigorous privacy and security policies.

Extensive Logging

OneIQ performs extensive logging to identify and mitigate security risks and vulnerabilities across all platform components.

Organizational Policies

Information Security Officer

OneIQ has a dedicated Information Security Officer responsible for ISO/IEC 27001 compliance, continuous improvement to security policies and procedures, and incident management.

Incident Management

OneIQ has rigorous information security incident management procedures for mitigating security incidents and communicating security events to affected parties.

Security Screening

New staff must undergo criminal record and employment verification checks before joining OneIQ. All contracts include a confidentiality agreement.

Security Training

All staff complete security training when they join OneIQ and at least once annually for refresh training.

2FA and SSO

All OneIQ systems have rigorous access controls and require single sign-on (SSO) with two-factor authentication (2FA).

Endpoint Security

All staff endpoints have BitLocker encryption and security scanning software. Staff must use single sign-on and follow clear-screen policies.

Talk to our security team

Bring your security
questionnaire.

Request the ISO/IEC 27001 certificate, the latest penetration test summary, or a review of your own security questionnaire - we answer in the language your security team expects.

Contact us AI Security