1Password

Cybersecurity Canada Website Reviewed Sept. 2, 2026

Password and secrets manager for teams, with Extended Access Management and device trust checks.

Certifications & Accreditations

Certification Certifying Body Scope Achieved Expiry Status
ISO/IEC 27001:2022 Accredited third-party certification body 1Password service and supporting ISMS Current
ISO 27017 and ISO 27018 Accredited third-party certification body Cloud security controls and protection of PII in public cloud Current
SOC 2 Type II Independent third-party auditor 1Password service; report available to customers under NDA Current

Compliance Frameworks

ISO/IEC 27001:2022
Full
SOC 2 Type 2
Full
GDPR 2016/679
Full
Processor under its DPA; EU data region available for 1Password Business
CIS V8
Partial
Supports CIS Control 5 and 6 account and access management outcomes
Cyber Essentials
Partial
Commonly used as evidence for Cyber Essentials password and MFA requirements

Assess 1Password in your own vendor risk programme

SnapGRC lets you send security questionnaires, track DPA status, manage sub-processors, and maintain a supplier risk register — all audit-ready.