Security & Compliance
Security you can verify
OneNotary is SOC 2 Type 2 audited and ISO/IEC 27001:2022 certified. Review our controls, policies, and reports in the OneNotary Trust Center.
Certifications & Standards
We are dedicated to protecting data and ensuring the confidentiality, integrity, and availability of our services.
SOC 2 Type 2
OneNotary adheres to the reporting requirements set by the American Institute of Certified Public Accountants (AICPA) Trust Services Criteria. We conduct annual audits of all aspects of our production operations, including data centers, and have consistently met all critical requirements.
ISO/IEC 27001:2022
OneNotary is ISO/IEC 27001:2022 certified, demonstrating our commitment to the highest standards of information security management. This certification ensures that we rigorously protect sensitive data and continuously improve our security practices.
MISMO
OneNotary complies with MISMO® (Mortgage Industry Standards Maintenance Organization) guidelines, aligning with the industry’s recognized standards for secure, reliable, and compliant Remote Online Notarization (RON). Our adherence helps ensure trust, data integrity, and interoperability across mortgage and real estate transactions.
How we protect your data
Security controls across our platform, infrastructure, and team. Detailed policies are available in the Trust Center.
Data security
Data is classified by sensitivity and encrypted at rest.
Application security
Our platform undergoes independent penetration testing.
Access control
Access to systems and data is tightly controlled and monitored.
Continuous monitoring
Logging and monitoring watch our systems for threats and vulnerabilities.
Network & endpoints
Our network is protected against external and internal threats, and devices follow industry best practices.
Incident response
A documented incident response plan guides how we detect, contain, and report incidents.
Business continuity
A business continuity plan, tested disaster recovery, and protected backups.
People & process
Security awareness training for every employee, plus formal risk assessment and change management.