Security and privacy
What the provider sees
To provide the service, oneid24 processes some account data. Other data is out of its reach.
What we see
- Each person's name and email address.
- The organisations a person belongs to and the roles assigned.
- Six kinds of event, with time and IP address: sign-in, failed sign-in, sign-out, password change, second factor set up and removed.
- The second factor secret, needed to verify the codes.
What we do not see
- Passwords: only their non-reversible form exists.
- Application content: it is not in oneid24.
- Temporary passwords, once they have been shown: they are not kept.