Trust & Security

Security practices built for real delivery teams.

One Horizon is designed to help teams move quickly without compromising data protection, access boundaries, or compliance readiness.

Current SOC 2 status

Controls are active now, certification is underway.

Security controls aligned with SOC 2 criteria

Formal certification process in progress

Pilot-first rollouts available for narrow team scopes

EU data residency

Data processing and storage runs in EU regions, with infrastructure in the Netherlands and Germany.

Encryption by default

Data is encrypted at rest with AES-256 and protected in transit with TLS 1.3.

Access controls stay intact

We inherit user-level permissions from your connected systems instead of bypassing them.

Security operations in place

Incident response procedures, network protections, and role-based database access are part of our baseline.

Security Review Workflow

Start with a scoped pilot when procurement scope is limited.

To reduce legal overhead upfront, we can run a pilot for a specific team or use case. This lets your team validate workflow and controls before broader rollout.

If your security team needs context early, we can share a practical security overview and data handling details before implementation.

Policy references

Public legal and compliance documentation