Trust Center
OnePay is a consumer financial services company built to help everyday people make real financial progress. Through a single mobile app, OnePay brings banking, savings, credit and debit, and payments together in one place, so customers can save, spend, borrow, and move their money without stitching together multiple disconnected products. Because our customers trust us with their money and sensitive personal information, earning and protecting that trust is foundational to everything we build.
OnePay also provides services and integrations for employers, workforce platforms, and other enterprise partners. This Trust Center provides those organizations with visibility into how OnePay protects information and manages its security and compliance program.
OnePay has completed a SOC 2 Type II examination and maintains a PCI DSS Attestation of Compliance, with the applicable reports available to request through this portal. OnePay’s security program is formalized through its Information Security Policy and supporting standards, which address areas including access control, encryption, vulnerability management, incident response, and business continuity. These controls are reviewed and tested on a recurring basis, with independent assessment results reflected in the reports and attestations available here.
Third-party risk management is an integral part of the program. Vendors are assessed for security and legal risk before onboarding, and vendors that handle sensitive data are subject to ongoing oversight in accordance with OnePay’s Third Party Risk Management Policy.
This Trust Center is intended for current and prospective OnePay business customers, enterprise partners, and their authorized assessors conducting security and compliance due diligence related to OnePay’s B2B services and integrations. It is not a consumer product or account-support portal. Consumers seeking information about OnePay products, account support, privacy, or consumer-facing security features should visit OnePay.com, the OnePay Help Center, or the OnePay Security page.
