This is where MSPs evaluating The One Stack and Hub for MSPs can find what a security or procurement review usually asks for: where the platform runs, how we protect platform secrets, which vendors process data for us, and how to report a security issue.
We publish only what we can back with evidence today. Where we don't make a claim, we say so.
At a glance
| Topic | Where we stand today | Read more |
|---|---|---|
| Hosting | The production platform runs on dedicated OVHcloud infrastructure. | Hosting and key management |
| Secrets and keys | Platform secrets are held in OVHcloud KMS where migrated; keys that stay in Azure Key Vault stay there by design. | Hosting and key management |
| Vendors | We publish the third parties that process data on our behalf. | Subprocessors |
| Certifications | We don't hold or claim a compliance certification or attestation today. | What we don't claim today |
| Service status | Live status, incidents, and maintenance are posted publicly. | status.theonestack.com |
| Vulnerability reports | Report suspected vulnerabilities through this Help Center. | Report a security issue |
Running a security review?
If your review needs answers that aren't on these pages, such as a security questionnaire, submit a request and say it's for a security review. Tell us which questions you need answered. We'll tell you what we can share and won't answer with claims we can't support.
Service status
Live service status, incidents, and maintenance: status.theonestack.com.
Contact
For security, privacy, and legal questions, submit a request in this Help Center. We don't commit to a specific response time.
This article describes The One Stack's practices as of the "last reviewed" date below. It is provided for general information only. It is not a contract, warranty, certification, or guarantee of any security outcome, and it does not change the terms of any agreement between you and The One Stack. Our practices may change over time. Last reviewed: 2026-10-28.