Oten Trust Center launched
GeneralPublished
This site is the single place to follow Oten's security and compliance program, request security documents and find out how to reach our security team.
Read more: Oten Trust Center launchedSecurity SaaS for a connected world
Explore the OXU Platform: identity, encryption key management and secure collaboration for teams and enterprises.
Explore the OXU Platform (opens in a new tab)A global security partner. A clear basis for trust.
Work spans offices, devices and borders. Oten builds security SaaS to help organizations manage who can access their systems and how their information is protected. Based in Switzerland, we bring this focus to the OXU Platform for teams working across a connected world.
Identity and access
Give people access to the applications they need through centralized identity management, single sign-on and multi-factor authentication. Help administrators manage access across their organization.
Encryption and key control
Manage encryption keys and review sensitive key operations. Give security teams a defined role in deciding how keys are used to protect information in connected cloud services.
Protected collaboration
Support teamwork with files encrypted on the device before upload. Combine protected content with access management so that collaboration remains connected to organizational oversight.
Built to support your security review
Choosing a security provider requires an understanding of both the product and the company behind it. Use this Trust Center to review our published controls, see the current status of our compliance program and understand the third parties involved in delivering our services.
- Understand the controls
Review our approach to product security, production access and infrastructure.
- Review data processing
See the purposes and listed locations of the providers that support our services.
- Continue due diligence
Find public resources and request security questionnaire responses under NDA.
For requirements specific to your organization, contact our security team with the services, deployment model and review scope you are evaluating.
Compliance
ISO/IEC 27001:2022
In progressCertification audit plannedSOC 2 Type II
PlannedSOC 3
PlannedGDPR
Aligned
Resources
View all ResourcesControls
View all Controls- Dedicated information security function
- ISO/IEC 27001 Annex A mapped
- Audited cloud infrastructure provider
- Single sign-on with multi-factor authentication
- Production hosts reached only through a gateway
- No direct database access for developers
- Separated environments
- Infrastructure defined as code
- Segmented production network
- Multi-factor authentication for customer accounts
- Standards-based single sign-on
- End-to-end encrypted files in OXU Drive
Data collected
- Account and contact details of customer administrators and users
- Authentication and identity data, such as directory attributes and MFA enrolments
- Device and security posture data for devices enrolled in OXU Access
- Files and notes customers store, encrypted on their device before upload
- Encryption keys customers manage in OXU KMS
- Security and audit logs, such as key operations
Subprocessors
View all SubprocessorsAmazon Web Services, Cloud infrastructure
Location: SingaporeBrevo, Email delivery
Location: European UnionGoogle Workspace, Communications
Location: United StatesFAQ
View all FAQUpdates
View all UpdatesSubprocessor list published
SubprocessorsPublished
The third parties that process customer data for the OXU Platform are now listed on this site. Future changes will be announced in this feed.
Read more: Subprocessor list publishedISO/IEC 27001:2022 certification program under way
CompliancePublished
We are establishing an information security management system to ISO/IEC 27001:2022 and have applied for the certification audit. Here is where the program stands.
Read more: ISO/IEC 27001:2022 certification program under way