Client-side encryption. Complete tenant isolation.
We do not hold your unencrypted data. OneHazel utilizes client-side AES-256-GCM encryption for all PII and hashed API credentials. By completely isolating data via strict row-level security and per-operator boundaries, we drastically reduce your GDPR liability profile.
Data Architecture
Encryption happens client-side before your data ever reaches us, and strict row-level security keeps every operator's data walled off from the next. We never hold your PII or API credentials in a form we can read.
Client-Side Encryption
AES-256-GCM applied client-side for all PII and hashed API credentials. Data is also encrypted at rest and in transit via TLS 1.2+.
Data Residency
All data hosted on EU infrastructure. No cross-border transfers. Data stays in the EU at all times.
Tenant Isolation
Strict row-level security and per-operator boundaries keep your data completely separated. Your data is never co-mingled with another customer's, which drastically reduces your GDPR liability profile.
Incident Response
Incidents are disclosed to affected customers within 24 hours. Platform status available at onehazel.com/status.
Response SLAs
Audited on every connector. Human in the loop.
Every AI-generated build is validated against rigorous automated test suites before deployment. If the agents encounter an unsolvable edge case, the build is immediately flagged for a Human-in-the-Loop review by our internal technologists.
Human in the Loop
Automated test suites validate every AI-generated build before it ships. When the agents hit an unsolvable edge case, the build is flagged for review by our internal technologists.
Self-Healing APIs
When an upstream vendor unexpectedly updates their API, OneHazel detects the drift and repairs the connector autonomously, guaranteeing zero downtime for your operations.
GDPR Data Processing Agreement
OneHazel acts as a Data Processor for your operator data. You remain the Data Controller. We process data solely for the purposes of delivering the OneHazel platform services as described in your agreement. Our DPA covers: