[Press Room] DocDraft and OneNotary announce partnership to expand access to legal services.

Security & Compliance

Security you can verify

OneNotary is SOC 2 Type 2 audited and ISO/IEC 27001:2022 certified. Review our controls, policies, and reports in the OneNotary Trust Center.

Certifications & Standards

We are dedicated to protecting data and ensuring the confidentiality, integrity, and availability of our services.

SOC 2 Type 2

OneNotary adheres to the reporting requirements set by the American Institute of Certified Public Accountants (AICPA) Trust Services Criteria. We conduct annual audits of all aspects of our production operations, including data centers, and have consistently met all critical requirements.

SOC 2 Type 2 certified badge

ISO/IEC 27001:2022

OneNotary is ISO/IEC 27001:2022 certified, demonstrating our commitment to the highest standards of information security management. This certification ensures that we rigorously protect sensitive data and continuously improve our security practices.

ISO/IEC 27001:2022 certified badge

MISMO

OneNotary complies with MISMO® (Mortgage Industry Standards Maintenance Organization) guidelines, aligning with the industry’s recognized standards for secure, reliable, and compliant Remote Online Notarization (RON). Our adherence helps ensure trust, data integrity, and interoperability across mortgage and real estate transactions.

MISMO logo
View reports

How we protect your data

Security controls across our platform, infrastructure, and team. Detailed policies are available in the Trust Center.

Data security

Data is classified by sensitivity and encrypted at rest.

Application security

Our platform undergoes independent penetration testing.

Access control

Access to systems and data is tightly controlled and monitored.

Continuous monitoring

Logging and monitoring watch our systems for threats and vulnerabilities.

Network & endpoints

Our network is protected against external and internal threats, and devices follow industry best practices.

Incident response

A documented incident response plan guides how we detect, contain, and report incidents.

Business continuity

A business continuity plan, tested disaster recovery, and protected backups.

People & process

Security awareness training for every employee, plus formal risk assessment and change management.