Protecting your data is our top priority
Trusted by some of the largest and most complex companies in the world, OneTrack is built with enterprise security in mind.
We track actions, not people
No faces. No voices. No surveillance.
- No facial recognitionNo fingerprints or any other biometric identifiers. Operators are identified by their equipment and a badge or QR code, not their faces.
- No audioOur cameras capture video without sound. Conversations stay private.
- Event-based videoOnly what's needed for safety, productivity and quality. Never continuous surveillance.
- Union-deployed at scaleRunning in union facilities today. You control what data is shared.
Built for the security standards you require
Deployed at Fortune 500 manufacturers and the world's largest 3PLs. Passes the toughest IT security reviews.
Encrypted and isolated
AES-256 at rest and TLS 1.2+ in transit. Each client's data is kept separate, with checks at every layer.
More on encryptionVideo that stays put
Users can't download video by default, and every video is watermarked with its origin.
More on video
Access by role, site and shift
Single sign-on with SAML. Role-based profiles decide who sees which events, reports and tools.
More on accessEvery action logged
All user activity is logged. People with the Audit permission can review it for their own scope.
More on audit logsNothing to install on your network
Sensors have cellular built in, so no network changes are needed. OneTrack runs on AWS, across multiple regions.
More on hosting
A person approves what matters
AiOn agents work with the same permissions as your people.
- One permission modelEnforced in the API, not in a prompt. An agent never has more access than the person who started it.
- Approvals in plain sentencesThe action waits, with every change shown, until someone says yes.
- Every change loggedAttributed to a person, with SSO through Okta and Microsoft Entra.
Independently audited
OneTrack is SOC 2 Type II. The report shows the controls and processes we use to keep client data secure and the system online.
Read the in-depth answers- SOC 2 Type II reportThe full audit reportAsk your OneTrack contact
- SubprocessorsThe third parties we use to deliver the serviceView
- Privacy policyHow we collect, use and protect personal dataRead
- Terms and conditionsThe terms for the OneTrack solutionRead
- Service level and supportOur service levels and support processRead
An in-depth look at OneTrack security
How does OneTrack control who can see what?
To make sure data and permissions are only available to authorized users, OneTrack supports role-based access controls that fit many different client requirements. Each user is configured for access to events, notifications, reporting and admin tools. User settings are grouped in profiles that are assigned to users. Profiles are typically scoped by client, plant, event type and shift.
How is our data secured and encrypted?
OneTrack captures image and video data, but does not extract, compute or store any biometric data. We do not perform any type of facial recognition or person identification. All data is encrypted with TLS 1.2 and AES-256, and logically separated by client across distributed databases, with authentication and authorization checks at every layer. Application users cannot download videos by default, and each video is watermarked with its origin.
Is OneTrack SOC 2 compliant?
Yes. SOC 2 (System and Organization Controls) is a leading security report given to a company after a third-party audit of its internal data security practices. OneTrack is SOC 2 compliant, and our report shows the controls and processes we use to keep client data secure and keep the system online. Prospective clients can request OneTrack's SOC 2 report from their main point of contact.
Where is OneTrack hosted, and what do we need on site?
There is no on-premises infrastructure to add apart from the OneTrack AI sensors, which our Field Service Engineer team installs. OneTrack uses Amazon Web Services (AWS) to host all databases, storage and backend services, and AWS is ISO 27001 and SOC 1 Type II certified. Deploying with other cloud providers, such as Google Cloud or Azure, is also possible on request. Our infrastructure is hosted across multiple regions with automatic failover.
What does OneTrack log, and who can see it?
OneTrack logs all user activity in the system. Client users with the Audit permission can view audit and log information within the scope they are assigned. For example, an HR user may be allowed to view all user activity from their site. Audit and log data is retained for at least 30 days.
Bring us your hardest problem.
We'll solve it together, on your data.