Security & Compliancy
Security and Privacy
Security and Privacy
Our promise
At Onesurance , data security is key.
We only process data within the European Economic Area and fully comply with the General Data Protection Regulation (AVG).
Hosting and security
All systems run on Microsoft Azure West Europe (Middenmeer, NL).
Data is stored encrypted (both at rest and during transmission).
Only authorized employees have access.
Access control, monitoring and penetration testing are performed structurally.
Backups and continuity
Daily backups of all production data (full, differential and transactional).
Backups are stored redundantly according to Azure policies.
Recovery Point Objective (RPO): maximum 8 working hours of data loss.
Recovery Time Objective (RTO): maximum 24-hour recovery time in the event of a disaster.
Data breaches and incidents
In the event of a suspected data breach, our internal protocol is immediately triggered:
The Data Protection Officer will investigate the report within 24 hours.
The client is informed of findings and next steps.
If necessary, notification will be made to the Personal Data Authority.
Improvement measures are recorded and monitored.
Processors and sub-processors
Onesurance is a processor of your data and uses Microsoft Azure as a sub-processor.
No data is stored or processed outside the EU.
Your rights and responsibilities
The supplied data remains the property of your organization.
You have the right to request inspection, correction or deletion of your data.
After termination of the agreement, your data remains available for export for up to 30 days.
Learn more
See also:
General Terms and Conditions of Onesurance
Service Level Agreement (SLA).
Processor Agreement
Security and Compliance at Onesurance
Trust as a foundation
At Onesurance , security and compliance with laws and regulations are at the heart of our business. As a provider of an AI-driven SaaS platform for the insurance industry, we ensure that our services are delivered in a transparent, secure and compliant manner. In this documentation, we explain our approach to information security, data protection, compliance and continuity.
Information Security
Cloud infrastructure
Our platform runs on Microsoft Azure, a globally renowned cloud environment that meets high standards of security, scalability and compliance. This provides the robust foundation for stable and reliable services.
Data encryption
All customer data is encrypted - both at rest and in transit. Thus, data is protected from unauthorized access or loss at all times.
Access Control
Access to the platform is governed by Role-Based Access Control (RBAC) combined with Multi-Factor Authentication (MFA). This combination minimizes risk and ensures secure access for all users.
Compliance & Regulatory Affairs
Compliance with legislation
Onesurance acts in compliance with the AVG/GDPR, the emerging EU AI Act, and other relevant European regulations. We process personal data in a transparent, secure and proportionate manner while maintaining the privacy of clients and end users.
Certifications
We are actively pursuing industry-leading certifications, including ISO/IEC 27001. This underscores our commitment to structural security, risk management and compliance with international standards.
Continuity and incident management
Backup & recovery
Our environment is continuously monitored and automatically backed up. In case of failures, we have a comprehensive recovery plan that allows for rapid return to full operation.
Incident response
In the event of a security incident, clear procedures take effect. We detect and analyze incidents quickly, inform the parties involved in a timely manner, and take action to limit the impact and prevent recurrence.
Support & Escalations
Support
For regular questions, please use the familiar channels: e-mail or the customer portal.
In case of urgent disruptions or security incidents, please contact us by phone:
📞 +31 6 132 70 144 (Monday to Friday, 08:30 - 17:30)
Complaint handling
Do you have a complaint or concern? Please contact your Customer Success Manager. We will provide transparent follow-up and keep you actively informed of progress.
In conclusion
Onesurance stands for a reliable, secure and future-proof solution for the insurance industry. Do you have questions about our security or compliance approach? Please feel free to contact us - we would be happy to help.