Legal Center: Our Policies | 1Password

·Legal

·Terms of Service

·These are our standard Terms of service for 1Password users.

·Extended Access Management Product-Specific Terms

·These product-specific terms outline specific details, requirements, and conditions related to the use of Extended Access Management.

·1Password Device Trust Product‐Specific Terms

·These product-specific terms outline specific details, requirements and conditions related to the use of 1Password Device Trust.

·SaaS Manager Product-Specific Terms

·These product-specific terms outline specific details, requirements, and conditions related to the use of SaaS Manager.

·Unified Access Product-Specific Terms

·These product-specific terms outline specific details, requirements, and conditions related to the use of Unified Access.

·1Password Privileged Access Product‐Specific Terms

·These product-specific terms outline specific details, requirements and conditions related to the use of 1Password Privileged Access.

·1Password SCIM bridge EULA

·License Agreement for 1Password SCIM bridge users and customers

·Accessibility Act

·1Password is committed to meeting the needs of people with disabilities by removing accessibility barriers and meeting or exceeding requirements defined by the Accessibility for Ontarians with Disabilities Act.

·Information for Law Enforcement

·AgileBits deeply appreciates the tireless work of law enforcement officials and agencies in their quest to keep society safe. We understand that in the course of some investigations you may have questions about 1Password and our customers.

·API and SDK Terms of Service

·API and SDK Terms of Service for 1Password developer tools.

·Transparency in Coverage Rule

·This link leads to the machine-readable files that are made available in response to the federal Transparency in Coverage Rule and includes negotiated service rates and out-of-network allowed amounts between health plans and healthcare providers. The machine readable files are formatted to allow researchers, regulators, and application developers to more easily access and analyze data.

·1Password Partner Agreement

·The 1Password Partner Agreement establishes the collaborative relationship with 1Password's resellers and managed service providers.

·1Password Media Kit and Brand Guidelines

·Our media kit contains logos, product images, headshots of our leadership team, and brand guidelines.

·Code of Conduct

·The 1Password Code of Conduct which includes information about our Ethics & Compliance Hotline. To make a hotline report please click here.

·Vendor Code of Conduct

·The 1Password Vendor Code of Conduct which includes information about our Ethics & Compliance Hotline. To make a hotline report please click here.

·Modern Slavery Transparency Statement

·The 1Password modern slavery and human trafficking statement.

·Environmental, Social and Governance Policy

·The 1Password Environmental, Social and Governance Policy.

·Anti-Bribery and Anti-Corruption Policy

·The 1Password Anti-Bribery and Anti-Corruption Policy.

·Beta Terms of Service

·The 1Password Beta Terms of Service.

·Security and Privacy

·Privacy Policy

·Privacy is a core value at 1Password. Our privacy policy details the personal data that AgileBits collects and processes as you interact with 1Password products and services, how we process data, and for what purposes.

·Data Processing Addendum

·The DPA outlines the terms and conditions for 1Password's processing of personal data in compliance with various data protection regulations.

·If an executable copy of the DPA is required please contact your Sales Rep.

·List of Sub-Processors

·1Password uses sub-processors that may store and process personal data of Customers. This page provides important information about the identity, location, and role of our sub-processors.

·ISO Certifications

·ISO/IEC 27001 is the world's most recognized standard for information security management systems, and defines requirements for certification. 1Password has achieved ISO 27001, 27017, 27018, and 27701 certifications.

·SOC2

·SOC2, or Service Organization Control, is an auditing process that ensures service providers securely manage data to protect the interests and privacy of their customers. 1Password is SOC2 Type 2 certified.

·Cookie Policy

·1Password.com and its subdomains use first-party cookies to monitor traffic data such as webpage views, and third-party cookies used by our affiliates for commission and advertising purposes.

·HIPAA

·The 1Password security model leaves AgileBits without a way to access, decrypt, or view anything you save in 1Password. As a result AgileBits isn't defined as a Business Associate pursuant to HIPAA nor subject to a Business Associate Agreement.

·Security Assessments

·1Password hosted services have been reviewed by multiple independent security firms.

·1Password Security Model

·Everything you store in 1Password is protected by uncompromising design choices fundamental to 1Password, including end-to-end encryption, smart features to limit exposure, and full data transparency audited by experts.

·Security Whitepaper

·1Password is secure by design. Learn how 1Password encrypts your data, protects your privacy, and safeguards your information.

·Legacy Trelica Customers (now SaaS Manager)

·These documents apply only to customers who purchased Trelica directly from Trelica prior to its acquisition by 1Password. They do not apply to customers who purchased Trelica by 1Password or SaaS Manager from 1Password. Customers who purchased from 1Password are governed exclusively by the applicable 1Password agreements available elsewhere in the Legal Center.

·Master Subscription Agreement

·Governs the subscription relationship between Trelica and customers who purchased Trelica prior to its acquisition by 1Password, including each party's rights and obligations.

·Acceptable Use Policy

·Describes acceptable and prohibited uses of the Trelica service by legacy Trelica customers.

·Data Processing Agreement

·Sets out how personal data is processed in connection with the Trelica service, including Trelica's data protection obligations and the roles of the parties.

·Third Party Sub-Processors

·Lists third parties authorized by Trelica to process data on its behalf in connection with the Trelica service.

·Service Level Agreement

·Describes service availability commitments and applicable service credits for the Trelica service.

·Security Practices

·Explains the security measures and controls used by Trelica to protect data processed in connection with the Trelica service.

·Privacy Policy

·Explains how personal information is collected, used, and protected by Trelica in connection with the Trelica service.

·Backup Policy

·Describes how data is backed up and retained for the Trelica service.

·Responsible Disclosure Policy

·Outlines how security vulnerabilities in the Trelica service can be responsibly reported.

·Minimum Requirements for using Trelica

·Outlines the technical and system requirements necessary to use the Trelica service.

·Archived - Master Subscription Agreement 1.0.0

·A prior version of Trelica's Master Subscription Agreement applicable to legacy Trelica customers.

·Archived - Third Party Sub-Processors (2025-03-21)

·Provides historical information about third-party sub-processors previously used by Trelica in connection with the Trelica service.

·Archived - User Terms

·Prior user terms applicable to earlier versions of the Trelica service.