1password.com
D
54 of 100
Enterprise AI readiness, from public pages only
Scanned 2026-11-01 from 61 public pages. Methodology 1.0. Category: Security.
| Identity | 5 of 10 | |
| Assurance | 24 of 25 | |
| Data and AI terms | 9 of 26 | |
| Deployment | 0 of 6 | |
| Agent readiness | 5 of 13 |
Trend and peers iHow the score moved over the last scans, how it compares with other scored companies in the same market category, and what about the last scan means the score may still move. Everything comes from public pages.
One graded scan so far. The trend shows after the next one.
Peers
Not enough scored companies in this category yet (1 so far, 5 needed).
Likely to change iWhat about the last scan means the score may still move: checks that could not be read, findings waiting for review, an old scan, an older methodology, or a scan that hit its page limit. These describe the scan, not the company.
- 5 findings are waiting for staff review.
Identity
SAML or OIDC single sign-on (10 points) Partly found
One of the things that makes adopting 1Password even easier is single sign-on.
source
SCIM provisioning (6 points) Under review
Roles and permissions (4 points) Under review
Assurance
SOC 2 Type 2 (10 points) Found
1Password is SOC 2 type 2 certified and complies with the most stringent industry standards for data confidentiality, integrity, and availability.
source
ISO 27001 (4 points) Found
1Password has achieved ISO 27001:2022, 27017:2015, 27018:2019, and 27701:2019 certifications.
source
security.txt (2 points) Partly found
Contact: mailto:security@agilebits.com
source
Data and AI terms
No training on customer data (8 points) Not found in public pages
Pages searched (1)
https://1password.com/legal/api-sdk-terms-of-service
Retention periods (5 points) Partly found
Database backups are retained for a period of 30 days.
source
Subprocessor list (5 points) Partly found
1Password uses sub-processors that may store and process personal data of Customers. This page provides important information about the identity, location, and role of our sub-processors.
source
Data processing agreement (4 points) Found
Data residency (4 points) Not found in public pages
Pages searched (20)
https://1password.com/.well-known/security.txthttps://1password.com/securityhttps://1password.com/pricinghttps://support.1password.com/1password-security/https://support.1password.com/authentication-encryption/https://1password.com/product/enterprise-password-managerhttps://1password.com/legal-centerhttps://support.1password.com/security-assessments/https://1password.com/securityhttps://1password.com/developer-securityhttps://1password.com/business-securityhttps://1password.com/resourceshttps://1password.com/personal-family-securityhttps://1password.com/developer-securityhttps://1password.com/resources/iso27001https://1password.com/legal/saas-manager/security-practiceshttps://1password.com/legal/terms-of-servicehttps://1password.com/legal/cookie-policyhttps://1password.com/legal/privacyhttps://1password.com/legal/accessibility
Deployment
Private deployment (6 points) Not found in public pages
Pages searched (20)
https://1password.com/https://1password.com/.well-known/security.txthttps://1password.com/securityhttps://1password.com/pricinghttps://support.1password.com/1password-security/https://support.1password.com/authentication-encryption/https://1password.com/product/enterprise-password-managerhttps://support.1password.com/security-assessments/https://1password.com/securityhttps://1password.com/developer-securityhttps://1password.com/business-securityhttps://1password.com/resourceshttps://1password.com/personal-family-securityhttps://1password.com/developer-securityhttps://1password.com/resources/iso27001https://1password.com/personal-ai-agent-integrationshttps://1password.com/pricing/enterprisehttps://1password.com/pricing/personalhttps://1password.com/product/enterprise-password-managerhttps://1password.com/customers/oracle-red-bull-racing-for-developers
Customer-managed keys (4 points) Under review
Agent readiness
Public API reference (5 points) Not found in public pages
Pages searched (1)
https://1password.com/
Official MCP server (6 points) Under review
Controls on AI agent actions (4 points) Found
Grant AI agents only the credentials a workflow needs, approved by a human, with the model never seeing the secret
source
Audit log export (2 points) Partly found
AI use policy (2 points) Not found in public pages
Pages searched (20)
https://1password.com/.well-known/security.txthttps://1password.com/securityhttps://support.1password.com/1password-security/https://support.1password.com/authentication-encryption/https://1password.com/product/enterprise-password-managerhttps://1password.com/legal-centerhttps://support.1password.com/security-assessments/https://1password.com/securityhttps://1password.com/developer-securityhttps://1password.com/business-securityhttps://1password.com/resourceshttps://1password.com/personal-family-securityhttps://1password.com/developer-securityhttps://1password.com/resources/iso27001https://1password.com/legal/saas-manager/security-practiceshttps://1password.com/legal/terms-of-servicehttps://1password.com/legal/cookie-policyhttps://1password.com/legal/accessibilityhttps://1password.com/personal-ai-agent-integrationshttps://1password.com/legal/scim-license
Rate limits documented (not scored) Under review
Changelog
- 2026-11-01: 63 to 54 (rescan) AI use policy: Could not check to Not found in public pages; Official MCP server: Could not check to under review; Data residency: Could not check to Not found in public pages; Customer-managed keys: Could not check to under review; Private deployment: Could not check to Not found in public pages
- 2026-11-01: First score, 63
Scores older than an hour can be refreshed.