Infrastructure
Hosted on AWS in the Mumbai (ap-south-1) region. Frontend on AWS Amplify, backend services in Docker containers.
Security & Trust
Protecting customer data is foundational to everything we build. Security at every layer — infrastructure, encryption, access controls, and tenant isolation.
How We Protect Your Data
Encryption
TLS 1.2+ for all data in transit. AES-256 encryption at rest for databases and file storage.
Tenant Isolation
Application-level multi-tenancy. All database queries scoped by company via RBAC middleware. Row-level data isolation.
Authentication
JWT tokens in httpOnly cookies. Passwords hashed with PBKDF2. Email verification required. Session management with secure refresh tokens.
Backups
Automated daily database snapshots with 7-day retention. Point-in-time recovery available.
Access Controls
Three-layer RBAC: module enabled → user role → user permission. Granular control over who sees and does what.
Compliance
Aligned with India's Digital Personal Data Protection Act and GDPR principles. No customer data sold to third parties.
Audit Logs
Comprehensive audit trail for user actions, data access, and configuration changes. Filterable logs available to workspace admins.
Subprocessors
AWS (infrastructure), Amazon RDS (managed database), Razorpay (payments), Anthropic Claude (AI), Microsoft (email delivery), Google (analytics & location services).
Incident Response
Security concerns can be reported to support@oneintelligent.ai. Dedicated response process.
Our Technology Stack
| Layer | Technology |
|---|---|
| Frontend | Next.js, React, TypeScript |
| Backend | Django, Django REST Framework, FastAPI |
| Database | Amazon RDS PostgreSQL (with pgvector for AI) |
| Cache | Redis |
| File Storage | AWS S3 |
| AI | Anthropic Claude, internal LLM via FastAPI |
| Hosting | AWS Amplify, Docker |
| Monitoring | CloudWatch |
Report a Security Concern
Have a security concern? Contact us at support@oneintelligent.ai