How we protect your data and keep the platform reliable.
Last updated: August 26, 2026
Safety data is sensitive by nature — incident reports, training records, and personal information about your workforce. We built One Stop Safety on infrastructure designed to keep that information protected, available, and accessible only to the people your organization authorizes.
One Stop Safety's database and application platform is powered by Caspio, which maintains SOC 2 Type II certification through independent, annual third-party audits, and supports compliance with GDPR, HIPAA, FERPA, PCI DSS, and FIPS 140-2 standards. Our application front end is hosted on Vercel's global infrastructure.
Data is encrypted both in transit (as it moves between your device and our servers) and at rest (as it's stored in our database), using industry-standard encryption protocols.
Access to your organization's data is restricted through role-based permissions and record-level security, so users only see the information relevant to their role. Login sessions are authenticated, and administrators can control which employees have access to which parts of the platform.
Authentication and session management are handled through our database provider's secure login infrastructure. We recommend your organization use strong, unique passwords and limit administrator-level access to trusted personnel.
Our infrastructure provider maintains audit logging to track how data is accessed and used, supporting accountability and helping identify unusual activity.
Your data is backed up as part of our infrastructure provider's standard operations, helping protect against data loss and support service continuity.
If you believe you've found a security vulnerability or have a security-related question, please contact us at [SECURITY CONTACT EMAIL] and we'll respond as quickly as possible.