Trust
Subprocessors
Last updated: 13 August 2026
Oneop uses a small number of third parties to run the platform. Every one that processes customer personal data on our behalf is listed below, with what it does and what reaches it. When this list changes, this page changes and its date changes.
The terms governing this processing are in theData Processing Agreement.
Where Oneop is today
This is the register's first published revision. Oneop's production application is not yet deployed and no customer data is being processed by anyone on this page. The vendors below are the ones contracted or configured for the launch architecture, and each row says plainly whether it is in use yet. We would rather publish that than a register which implies processing that has not started.
Section 1 — Oneop's subprocessors
These are engaged by Oneop, using Oneop's own credentials, and process customer data on our behalf.
| Subprocessor | What it does | What data reaches it | Location |
|---|---|---|---|
| Hetzner Online GmbH | Application compute and the PostgreSQL database. Both run on the same server; there is no separate database vendor. | All customer data, at rest and in transit through the application | Germany (EU) |
| Cloudflare, Inc. | DNS, TLS, WAF and CDN; this marketing site (Pages); the tunnel that fronts the application; access control on the internal operations console; R2 object storage for files and attachments; privacy-preserving web analytics; email routing for our published addresses; and KV storage for messages sent through the forms on this site. | Request metadata and IP addresses; uploaded files, attachments, receipts and documents (R2); mail sent to our published addresses; the name, address and message you type into a form here | US-headquartered with a global edge. The R2 bucket is created in Cloudflare's European Union jurisdiction, so object data stays in the EU. |
| Lemon Squeezy LLC | Merchant of record for Oneop subscriptions. Lemon Squeezy is the legal seller of your Oneop plan: it runs checkout, charges you, and handles sales tax and VAT. | Billing contact details, purchase and subscription records, and the tax jurisdiction derived from them. Oneop never receives or stores card numbers. | United States |
| Resend | Transactional email delivery — the mail Oneop itself sends, and the mail the product sends on your behalf. | Recipient addresses and the content of that email | United States |
| Google LLC — Generative Language API (Gemini) | The sole AI model provider. Every AI feature in the product calls it. | Only the content the triggered feature needs — a conversation turn, a ticket thread, an uploaded document, an agent's reasoning context — after PII redaction and injection screening. Never the whole workspace. | United States |
| Google LLC — Google Analytics 4 | This marketing site only. Counts visits and page views on oneop.io (property G-66QW28D4BL). It is not loaded by the product: nothing you do inside your workspace at app.oneop.io reaches it. No advertising features, audience sharing or Google Signals are enabled on the property. | Pages viewed on this site, the referring page, your IP address (discarded by Google after deriving an approximate location), and coarse device and browser information, tied to a random first-party cookie identifier | United States |
| Google LLC — OAuth, Gmail, Calendar | Sign-in with Google; sending and receiving mail from a connected Gmail mailbox; calendar free/busy and event creation | Account email and provider subject ID at sign-in; message content for connected mailboxes; meeting times | United States |
| Microsoft Corporation — OAuth, Outlook | Sign-in with Microsoft; sending and receiving mail from a connected Microsoft 365 mailbox | Account email and provider subject ID at sign-in; message content for connected mailboxes | United States |
| Stripe, Inc. | Stripe Connect only. Stripe processes payments from your clients into your own Stripe account, if you connect one. It is not Oneop's subscription biller — that is Lemon Squeezy, above. | Payment metadata for the invoices you issue to your own clients | United States |
| Zoom Video Communications, Inc. | Not currently configured. When it is, it creates a meeting when a booking is made and receives the webhook that marks it complete. | Meeting time, subject and invitee email addresses | United States |
| Jina AI GmbH — embeddings | Not currently configured. When a key is set, it generates text embeddings so knowledge-base search is semantic rather than keyword-based. While it is unset, no data reaches Jina at all and search falls back to keyword matching. This row stays on the page, rather than being removed, so that turning it on is a visible change to this register. | Knowledge-base article text | Germany (EU) |
Two vendors that appeared on earlier drafts of this page are not on it: Twilio SendGrid and Postmark. Both were email providers under consideration; Resend is the one being deployed, and neither of the other two has processed any customer data. They are named here rather than silently dropped, because a vendor disappearing from a subprocessor register without explanation is exactly the kind of change this page exists to make visible.
Section 2 — Integrations you connect yourself
These are not Oneop subprocessors. They only receive data if you connect them, using credentials you supply, under your own agreement with the provider. They are listed here so you can see the complete picture of where data can travel.
| Provider | What it does when you connect it |
|---|---|
| HubSpot | Two-way contact, company and deal sync; chatbot lookup steps |
| Salesforce | Contacts, Accounts and Opportunities sync in; contacts and deals are pushed back out |
| WooCommerce | Product search, order lookup and tracking, cancellations and returns from the chatbot |
| Shopify | Reads products, customers and orders into Oneop; nothing is written back to your store |
| WordPress | Embeds the chat widget on your site via the official plugin |
| Any IMAP/SMTP mailbox | Sends and receives mail from a mailbox you own |
| Apollo.io | Contact enrichment — you send a name or email and receive title, company and seniority |
| Plaid | Bank feed: transaction and balance sync into the finance module |
| Stripe Connect | Payments from your clients land in your Stripe account, not Oneop's |
| DocuSign · Dropbox Sign (HelloSign) | E-signature on CRM quotes |
| QuickBooks Online | Two-way accounting sync |
| Shipping carriers — EasyPost, Shippo, ShipStation, FedEx, UPS, USPS, TCS, Leopards Courier, PostEx | Live rates, label purchase and tracking, using your own carrier accounts |
| Statutory tax authorities — HMRC (UK), FBR/PRAL (Pakistan) | Direct submission of a VAT or sales-tax return you file |
Credentials for all of these are encrypted with AES-256-GCM before Oneop stores them, and are held per workspace rather than shared.
Section 3 — Changes to this list
Oneop will update this page before a new subprocessor begins processing customer data, and will give account owners at least 30 days’ notice. If you object on reasonable data-protection grounds, the process is set out in theData Processing Agreement.
Questions: privacy@oneop.io
Links out
Data processing agreementPrivacy policySecurityTerms of service
No CTA banner on this page — a legal page ending in a sales banner reads badly and helps nothing.