Trust centre planned for fall 2026

We plan to launch a Onetime Secret trust centre in fall 2026. It will bring together the documents and operational details customers need for security review: our policies, Data Processing Agreement (DPA), Technical and Organisational Measures (TOMs), and a named, dated subprocessor register.

The centre will provide more detail on how secrets are encrypted, read once, and deleted; where regional environments and backups are hosted; and what we can provide for vendor questionnaires. Its source and revision history will remain public, so substantive changes can be reviewed as diffs rather than taken on trust.

The trust centre will become the home for updated versions of our Privacy Policy and Terms of Use. These documents will begin a new, public revision history in the trust centre.

Our current Privacy Policy and Terms of Use will remain available through the Site Policy repository. That repository, including its complete history, will remain publicly accessible as an archive. We will share more information about changes to the updated documents as the details are finalized.