Security & trust

Tenant isolation and operational control by design.

ONE is built for B2B multi-tenant delivery. Cross-tenant access is denied, credentials can be rotated, and operators have clear options to contain issues when something goes wrong.

Current platform controls

What product and security teams evaluate.

01

Multi-tenant isolation

Customer-scoped access controls deny cross-tenant attempts on admin and partner surfaces.

02

API key lifecycle

Named keys with create, list and revoke flows — including rotation practices for operational hygiene.

03

Admin access separation

Tenant admin membership and platform-admin separation keep elevated actions intentional.

04

Incident response options

Tenant disable and key revoke options help limit blast radius during incidents.

05

Data responsibility

ONE processes nutrition-related product data for your tenants. It is not a medical device and does not provide medical advice.

06

Request traceability

Request identifiers and operational visibility support troubleshooting during evaluation and production support.

Enterprise options

Customer-specific arrangements.

Some requirements are scoped through OSCA Solutions engagement rather than assumed as universally available defaults.

Data residency

Deployment and data residency options are discussed based on customer requirements and the applicable service architecture.

SLA and compliance

Formal certifications, legal review, SLA expectations and customer-specific DPAs are handled through OSCA Solutions engagement — ask us what you need for your risk process.

Honest boundaries

Trust without overclaiming.

We describe controls that exist in the platform model and separate them from enterprise options that depend on customer arrangements. ONE does not diagnose conditions, prescribe diets or provide clinical recommendations.

Build personalised nutrition into your product.

Talk to the ONE by OSCA team about how personalised nutrition can fit your product roadmap — and how optional wearable data context can extend it when needed.

Product teams book a demo · Engineering teams explore the API and SDKs