Security & Trust

Last updated: September 2026

We take the security of client data and payment information seriously. Here's a plain-language overview of how we protect it.

Payment Security

All payments on this site are processed by Stripe, a PCI-DSS Level 1 certified payment processor — the highest level of certification in the payments industry. Card numbers and sensitive payment details are transmitted directly to Stripe and never touch our own servers.

Data Storage

Client, invoice, and communication records are stored in an access-controlled PostgreSQL database on infrastructure we directly manage. Access is restricted to authorized personnel and protected by authenticated, session-based login with signed session tokens.

Encrypted Connections

All traffic to onepointcto.com and our admin console is served over HTTPS/TLS, encrypting data in transit between your browser and our servers.

Access Controls

Our client admin console requires authentication and is accessed only via a dedicated, isolated subdomain. Cross-origin requests are restricted to a strict allowlist of trusted domains.

Reporting a Concern

If you believe you've found a security issue affecting our site or systems, please report it to billing@onepointcto.com. We take all reports seriously and will respond promptly.

For more detail on how we handle personal data, see our Privacy Policy.