Level up your business security with free, on-demand training and certification. Explore 1Password Academy today →
Forum Discussion
dragon1
1 month agoDedicated Contributor
As a 1Password user - how to access security audits?
Hi there, as a paying 1Password user how can I access your security audits? After the change last year I cannot access them. As a privacy orientated user I'd like to get some insight into that. Th...
AJCxZ0
1 month agoSilver Expert
Have you already visited Security audits of 1Password, clicked 1Password Trust Center , clicked 🔒 Get access, filled out the form, got errors about characters it doesn't like, read the Drata Trust Center Terms of Use, wondered who or what Drata is and why their terms apply to an apparently unrelated web site, submitted the form anyway, then waited for the approval email?
- 1P_Dave1 month ago
Moderator
Sorry for the confusion. The 1Password Trust Center is built on SafeBase (by Drata), which we use to support disclosure of security and compliance information. That is why you'll see Drata referenced.
-Dave
- AJCxZ01 month agoSilver Expert
That would explain the email from SafeBase <notifications@safebase.co> Invitation to Access 1Password's Trust Center and the second email Access Granted to 1Password's Trust Center with links in the email to app.safebase.io [n.b. not the same as safebase.co], since clicking links in email from senders you don't know to web sites with different domains from the sender (and 1Password) is just fine.
You might consider mentioning these names close to the request process so that we know to expect to see these names of a third party provider. While it's no surprise that 1Password uses such providers, it's a bit of a surprise for this kind of content, which would usually just be pages on your web site, and the audience for this is the cream of the paranoids.