Skip to main content

Technical FAQs

Everything you need to know about hosting, security, and implementation

Written by Support

This guide answers the most common technical questions about ONE - from infrastructure and integrations to security and data protection.


System hosting & infrastructure

Is ONE deployed in the public cloud?

Yes - ONE is hosted on Amazon Web Services (AWS), providing a scalable and secure cloud environment.


Can files be hosted on a client’s own cloud storage?

Absolutely. We offer flexible options:

  • Integrate with existing video platforms (e.g. Brightcove)

  • Use ONE’s integrated video hosting

  • Store images, PDFs, and assets within AWS (included in subscription)

  • Or reference files hosted on your own storage

We support both fully managed and hybrid setups.


Is ONE optimised for a specific browser/platform?

ONE is built to be:

  • Mobile and desktop friendly

  • Optimised for the latest 2 versions of all major browsers

  • Compatible across Apple and Windows devices


Customisation & releases

How are client customisations managed?

Each client has their own GitHub repository, cloned from the ONE master repository.

How it works:

  1. Customisations are applied per client

  2. New features are developed on the master repo

  3. Features go through testing

  4. Merged into client repositories

  5. Deployed to staging for approval

  6. Released to production

This ensures flexibility without compromising stability.


What is your release strategy?

  • Weekly releases to staging for testing

  • Promoted to production once approved

  • Critical bugs → fixed and deployed immediately


What is your uptime SLA?

  • Hosted on AWS infrastructure

  • Target uptime: 99.99% monthly uptime


Is ONE a SaaS platform?

Yes - with a twist

  • Delivered as a SaaS model

  • Highly customisable per client

You get the cost efficiency of SaaS with the flexibility of bespoke development.


Security & compliance

What security standards are followed?

We maintain strong internal security practices:

  • GDPR-certified staff

  • Regular risk assessments & policy updates

  • Secure data transmission using HTTPS & strong encryption (SSL)

  • Regular patching of infrastructure


Are independent security reviews conducted?

Yes - both the website and app are fully penetration tested by a CREST-approved supplier.


How secure are videos?

Security depends on the streaming method:

  • HLS (web) → Encrypted, highly secure

  • MP4 (iOS app) → Encoded within the app

Downloaded videos cannot be played outside the app.


How do you prevent data leakage between clients?

We use:

  • A robust permissions model

  • Automated unit and CI testing

Ensures strict separation between client environments.


How is client data protected?

  • Access restricted to authorised personnel only

  • Risk-based security controls for all systems

  • Optional advanced setups (e.g. hardware security modules)

  • Secure storage of encryption keys


How is data encrypted in communications?

We use trusted platforms like:

With support for:

  • SAML-based SSO

  • SCIM provisioning

  • Data Loss Prevention (DLP)

  • Enterprise Mobility Management (EMM)

  • eDiscovery


Backups & disaster recovery

Are backups in place?

Yes - via AWS managed services:

Database (RDS)

  • Daily backups (retention: 7 days)

  • Backup window: 02:00–04:00 GMT

  • Restore to any selected snapshot

Asset storage (S3)

  • File versioning enabled

  • Replicated to a secondary region

  • Rollback available if needed


What about code backups?

  • Stored securely in GitHub

  • Frequent commits throughout the day

Worst case: minimal loss (~30 minutes of work)


Access control

How are user accounts created?

  • Users receive a random, one-time password

  • Must reset password on first login


Is user identity verified?

  • External users → require manual approval

  • Internal users → created by admins only

  • Email verification required on first login


What are the password requirements?

  • Minimum: 8 characters

  • Additional protections via Google authentication & 2FA tools


APIs & integrations

Are APIs available?

Yes

  • RESTful JSON API available


Can ONE integrate with other platforms?

Yes - we’ve integrated with a wide range of systems, including:

  • Salesforce

  • Rightsline

  • EasyTrack

If your platform has an API, we can likely integrate with it.


ONE combines enterprise-grade infrastructure, robust security, and flexible integrations - all delivered through a scalable SaaS model.

Whether you're looking for reliability, customisation, or seamless integration into your existing ecosystem, the platform is built to support your needs.


Need more details?

If you have further technical questions or require documentation, please contact your Account Manager or support@thisisone.tv

Did this answer your question?