Case Management / AI-powered / Built for operational compliance

Sensitive cases, handled with the care they deserve.

OnePointe is a case management platform for the teams that handle civil-rights, conduct, and workplace investigations. The AI drafts, flags, and summarizes. It never decides. A named person does, on the record. Purpose-built for the institutions and organizations that take this work seriously.

Book a walkthrough Explore the platform ▸

SOC 2 Type II · zero findings WCAG 2.1 AA · verified US-hosted · single-tenant

Audit trailCAS-2026-0418

Logged

append-only · cryptographically chained · replicated

Public intakeone front door

What would you like to do?
›File a reportencrypted
›Check a report statussecure code
!Emergency: 911 + safety resources

quick exit · keyboard-first · screen-reader complete

Case fileCAS-2026-0418

Parties0 linked
Unified timeline0 events
Evidence0 items
ModuleTitle IX

one record · thirteen standing sections

The IntelligenceClaude

It drafts. It flags. It summarizes.
It never decides. You do.

reconstructing chronology from 41 sources✓ 11 milestones · fully editable

advisory only · every invocation logged

Investigationchronology

04/18 09:12 Report received · logged

04/18 11:40 Complainant interview · notes filed

04/21 14:05 Evidence linked · 6 items

04/24 10:00 Questions drafted · investigator review

source-aware timestamps · chain of custody

Case density mapde-identified

density by building · no individuals shown

Scheduletoday · 5 events

00Complainant intake interviewCASE-0471
00Pre-hearing conferenceCASE-0470
00Witness check-inCASE-0466
00CSA report submission dueDEADLINE

case context on every event

The platform

One front door. One record. One defensible trail.

Every report enters the same way, lives in one case file, and leaves a record that holds up to anyone who asks. The capabilities below ship today across all environments.

Public intake

A calm front door for a hard week.

The public-facing intake opens with one question, what would you like to do, and routes to the right form or a status check from there. Built around the people who actually use it: reporters, staff, and the parties involved.

File a report or check status from a single landing page
Emergency and safety resources surfaced prominently on every page
Quick-exit button for reporters who need to leave fast
End-to-end encrypted, keyboard-first, full screen-reader support

public intake

What would you like to do?
›File a reportencrypted
›Check a report statussecure code
!Emergency: 911 + safety resources

Case file + timeline

One record. The whole story.

Parties, evidence, communications, and decisions held in a single case file with a unified timeline. Title IX, Title VI, and Conduct cases all flow through the same dashboard, so nothing fragments across tools.

CAS-2026-0418

Parties0 linked
Unified timeline0 events
Evidence0 items
ModuleTitle IX

Investigation

Evidence, interviews, and the report that follows.

A workspace for evidence handling and interview notes, with chronological evidence linking and source-aware timestamps. Investigators can generate calibrated interview questions from the case file, then review and adjust before any meeting. The AI never asks the question itself.

When the record is ready, the platform assembles a draft investigation report from the material already in the case file - meeting notes, evidence files, and party and witness statements - organized into a standard structure with every assertion cited back to its source. It is a first draft the investigator edits, verifies, and signs. The system drafts the report. It never reaches the finding.

Report drafted from meeting notes, evidence files, and recorded statements in the case
Standard sections: allegations, procedural history, evidence summary, and analysis scaffold
Every drafted line cites the case record it was built from
Held as an editable draft until an investigator finalizes it - findings are always human

investigation chronology

04/18 09:12 Report received · logged

04/18 11:40 Complainant interview · notes filed

04/21 14:05 Evidence linked · 6 items

04/24 10:00 Questions drafted · investigator review

04/29 15:20 Investigation report drafted · investigator review

Audit trail

Defensible at every step.

Every action, edit, and access logged automatically, in order, without anyone remembering to. The case audit log is replicated synchronously across regions, so the record survives a failover with zero data loss. This is the record that lets your team sleep at night.

immutable log

Reports · geographic intelligence

Patterns, without exposing people.

The Reports module surfaces case density and trend hotspots across buildings, sites, and locations. De-identified by default, with aggregation thresholds configurable per organization to prevent re-identification of small populations.

case density map

ElevatedModerateLow

ElevatedModerateLowAggregated · no individuals shown

De-identified clusteringby building · time-of-day

The intelligence

It drafts. It flags. It summarizes.
It never decides. You do.

OnePointe introduced AI to support professionals, not replace institutional judgment. It drafts the notices, reconstructs the timeline, and summarizes the long file. Every suggestion is advisory, editable, and logged in the audit trail beside the decision a person actually made.

Timeline reconstruction

Structured chronology, from the record.

Generates structured timelines from case records, emails, interview summaries, and uploaded documents, surfacing sequence gaps, delayed response points, overlapping reports, and policy-relevant milestones across every module.

reconstructing chronology from 41 sources✓ 11 milestones · fully editable

Interview questions

Calibrated questions, drafted for review.

Drafts interview questions tailored to a case's facts, with tone configurable per institution, from formal to trauma-informed. The investigator reviews and adjusts before any meeting.

drafting questions · tone: trauma-informed✓ advisory · the AI never asks the question itself

Data sovereignty

We do not train AI on your cases. Your institutional data belongs to you.

Student records, complainant information, employee matters, and investigative documentation remain isolated within your environment. Enterprise customers can bring their own encryption keys via AWS KMS, holding the keys in their own AWS account and revoking access at any time. That is not positioning. It is principle.

keys: customer-managed · access revocable · training on case data: never

The modules

Six bodies of work. One dashboard.

OnePointe covers the civil-rights, conduct, accessibility, and behavioral work institutions cannot afford to mishandle. Every module shares the same intake, timeline, and audit trail. Here is how each runs.

›Unified by design. Title VI flows through the same dashboard as Title IX and Conduct, and is included at no additional charge.

The problem

Three tools and a folder of spreadsheets is not a record.

The work is hard enough. The system underneath it should not be the reason a case falls apart. Whether you are running on spreadsheets or on an older platform built before AI and before civil-rights work spanned this many laws, one record beats many.

Today

A case lives in four places and someone's memory.

Intake by email, evidence in a shared drive
Deadlines tracked in a spreadsheet, or not at all
Each case type handled in a different system
When OCR asks, you reassemble the story by hand

In OnePointe

One case file. One trail. Every module, one dashboard.

Every report enters through one structured front door
Title IX, Title VI, and Conduct share one timeline
Every action logged automatically, in order
The record is already assembled when anyone asks

From the field

"We replaced three tools and a folder of spreadsheets with OnePointe. The audit trail alone changed how our team sleeps at night."

Director of Investigations · Institution

3 → 1

tools, consolidated

of actions logged

case-type modules, one dashboard

The AI layer

How the AI works, and where it stops.

Every coordinator asks the same question about AI in a case file: who decided? With OnePointe the answer is always a person, by name, on the record. Here is the exact line the AI does not cross.

The AI drafts

It reads the file and prepares the summary, the timeline, the flagged inconsistency, the first pass at a report. It does the assembly a person would otherwise do by hand.

A named person decides

Nothing the AI produces takes effect on its own. A coordinator or investigator reviews it, edits it, and approves it. The judgment is theirs. This is the line the system will not cross.

The record proves it

Every AI action and every human decision is logged in the audit trail, timestamped and attributed. Never decides is not a promise on a page. It is a record you can produce.

Security & compliance

The infrastructure under work that can't go wrong.

Independent assessments and documentation available under NDA through your account manager.

SOC 2 Type II

Independent audit, zero findings.

Completed for the 12-month period ending February 28, 2026. Report available under NDA.

WCAG 2.1 AA

Independently verified.

Third-party accessibility audit against Level AA, with a public conformance summary and remediation roadmap.

FERPA · DPA

Built for institutional data.

FERPA addendum, a Data Processing Agreement, and applicable privacy terms, provided in the security packet for your CIO.

BYOK · AWS KMS

You hold the keys.

Enterprise customers manage their own encryption keys, with rotation, revocation, and independent audit.

Resilience

Active-active, zero RPO.

Multi-region failover across U.S. East and U.S. West, automatic with a 5-minute RTO. Audit log loss: none.

AI data use

Never trained on your cases.

Institutional case data is never used to train models, and stays isolated within your environment.

Why trust us

We operate the way we ask you to operate.

OnePointe is new, and we built it that way on purpose. We grow deliberately, so every institution is built with, not sold to. Until the logos and the years accumulate, we earn trust the way this work demands it. In the open.

Published pricing

Every number is on the site. No quote-gating, no discovery call required to learn what it costs.

A public changelog

Every release, every security-relevant change, every deprecation. Written for the people who own the audit.

Real audit trails

The same append-only, attributed record we give your cases, we hold ourselves to. No black boxes.

Built from the chair

The person who demos OnePointe has sat in your seat. A decade of civil-rights compliance work, not a sales script.

Pricing

Pricing you can actually see.

You pay for what you turn on, and you can see every number before you talk to anyone. No bundling you into modules you will never use, and no quote-gate to find out what it costs.

A serious institutional purchase should not require three sales calls to get a number. Our pricing is published and our contracts are straightforward.

The Partner Institution Program is how you buy: begin for $2,000, prove the platform on real cases, and ramp to the published rate over a single three-year agreement.

How pricing works · one agreement, priced to ramp

You sign once, at the start - a single three-year agreement. Year one is priced to prove it, year two to grow into it, and year three settles at the published rate, locked as your founding-partner rate for the life of the relationship.

No conversion decision at month six. Only a 30-day exit if we miss our performance commitments.

Year 1 · The partner year

Prove it on real cases.

$2,000to begin

+ $250 / month · $5,000 all-in for year one

Implementation, data migration, SSO, and training covered by the $2,000
Full access to every core module; Employee Relations, Bias Response, and Clery available as add-ons
Dedicated success manager and quarterly reviews
Your records, workflows, and configuration remain yours

Year 2 · The growth year

Nothing to re-procure.

50%of the published rate

Budget already approved - no second procurement cycle

Everything continues under the original agreement
Ongoing upgrades and new module releases included
Dedicated success manager continues

Year 3 + · Founding-partner rate

The published rate, locked.

$1.75per student · per year

Locked as your rate for the life of the relationship

Renewable in 1-, 3-, or 5-year increments
Full data export rights at any time
Covers all student, faculty, and staff matters - every module

See your three-year ramp

Total enrollment · 9,800 students

Or pick a typical size:

We use student count to keep pricing simple. Faculty & staff coverage is included automatically.

Government agencies, employers, and nonprofits are priced per seat, per licensed investigator or coordinator - not per student. Ask for a quote ›

Year 1$5,000all-in · to begin

→

Year 2$8,57550% of the rate

→

Year 3 +$17,150$1.75 · locked

Core modules included. No per-seat fees. Add-ons priced in the open. No price increase mid-contract.

Get started with the Partner Institution Program ▸

As a partner institution, you commit to naming an executive sponsor, joining quarterly feedback sessions, contributing roadmap input, and providing a reference or case study at the twelve-month mark. In return, you keep a thirty-day exit if we do not meet our performance commitments, full export of your data at any time, and ninety days of transition support if the relationship ever ends.

Over 50,000 students or multi-campus?

Let’s design something specific to you.

Large universities and multi-campus systems get a custom contract with volume pricing, customer-managed encryption keys (BYOK), single-tenant deployment, SIEM integration, SCIM provisioning, dedicated CSM, and 24/7 support.

Scope your deployment

Included on every plan

Implementation & data migration Staff training (live or recorded) Unlimited cases & storage U.S. hosting & encryption Quarterly product updates Add-ons priced in the open Data export at any time No price increase mid-contract

Availability

Available on the web, and on your desktop.

OnePointe runs in any modern browser and as a dedicated desktop app for macOS and Windows. Sign in with your institution's single sign-on - there is nothing to install for the web.

This is the command bar. In OnePointe, ⌘K on macOS or Ctrl K on Windows searches cases, policy, and people from anywhere, without leaving the keyboard.

Web

Any modern browser on desktop, tablet, or phone. Nothing to install. Sign in with institutional SSO.

Open in your browser

Chrome · Edge · Safari · Firefox

macOS desktop app

A focused desktop app for coordinators who live in the case file all day, with the same record and audit trail as the web.

Get the macOS app →

macOS 12 or later · from your admin console

Windows desktop app

The same desktop experience for Windows institutions, deployable through your standard management tooling.

Get the Windows app →

Windows 10 and 11 · from your admin console

No separate iOS or Android app is required - the web app is fully responsive on phones and tablets, so the front door and the case file travel with you.

Request a demo

See OnePointe with someone who has been in your seat.

A 30-minute walkthrough with a former coordinator, investigator, or dean. No slide deck, no SDR script, just a real look at the platform on your terms.

Book a walkthrough Become a partner institution ▸

Led by a peer, not a sales rep We model your sanitized scenarios live Leave with a security packet for your CIO

Security & infrastructure

Sensitive cases deserve quiet, hardened systems.

OnePointe is built for institutions that cannot afford to be wrong about who saw what, when, and why. Every layer of the platform exists to make the record defensible and the access auditable.

SOC 2 Type II WCAG 2.1 AA FERPA school official US-hosted single-tenant AES-256 encrypted

SOC 2 Type II · observation in progressWCAG 2.1 AA · verifiedFERPA-aligned · BAA on request

Data protection

Every byte of Customer Data is encrypted at rest and in transit. We do not train AI models on Customer Data, we do not sell it, and we do not share it with advertisers.

Encryption in transit

TLS 1.3 for all client and service-to-service traffic. Older protocols are disabled at the edge.

Encryption at rest

AES-256-GCM at the storage layer. Customer-managed keys available via AWS KMS, with quarterly rotation enforced.

Field-level encryption

Designated sensitive fields (party names, narratives, attachments) are encrypted at the application layer with envelope encryption. Decryption requires both the row key and an active session.

Access & identity

Single sign-on

SAML 2.0 and OpenID Connect supported on every plan. SCIM 2.0 for automated provisioning and deprovisioning against your identity provider.

Multi-factor authentication

WebAuthn / FIDO2 keys, TOTP authenticators, and platform passkeys. SMS is not offered as a primary factor.

Role-based access

Permissions scope to module, case type, and individual case. Coordinator, investigator, decision-maker, advisor, and observer roles ship by default. Custom roles can be defined for your structure.

Session management

Configurable idle timeout, IP allowlists, and forced re-authentication on sensitive actions (exports, role changes, retention overrides).

Audit & monitoring

Field-level audit trail

Every read, write, export, and access grant is recorded with actor, timestamp, IP, and the prior value. The log is append-only and cryptographically chained. Customers cannot disable it. Neither can we.

SIEM export

Native pipelines to Splunk, Microsoft Sentinel, Datadog, and Sumo Logic. Real-time forwarding via webhook for institutions running their own stack.

Anomaly detection

Unusual access patterns (off-hours bulk exports, cross-role reads, atypical IP geography) raise an alert to your security team and to ours.

Retention & legal hold

Configurable retention per case type, with legal hold that overrides automatic deletion. When data ages out, it is cryptographically shredded by destroying the row keys.

Infrastructure

Hosting

AWS us-east-1 primary, us-west-2 failover. US-only data residency. We do not subprocess to non-US infrastructure.

Availability

99.95% uptime SLA. Backups every 15 minutes, retained 90 days. RPO under 5 minutes, RTO under 1 hour.

Tenant isolation

Single-tenant logical isolation at the database level, with per-tenant encryption keys. Customer Data from one institution is not readable from another, even by OnePointe operators.

Vulnerability management

Penetration testing

Twice-yearly external pentest by a recognized firm. Summary report available under NDA. Critical and high findings are remediated before publication.

Dependency & container scanning

Daily scanning of dependencies and container images. Critical CVEs trigger an automated rebuild and redeploy within 24 hours of disclosure.

Continuous review

We do not run a paid bug-bounty program. Instead, our systems undergo continuous, AI-assisted security review - dependency, configuration, and code analysis run daily - alongside scheduled third-party penetration testing. Vulnerability reports are always welcome at security@onepointe.ai, encrypted to our published key.

Security changelog

A public changelog at /updates records every security-relevant change with a CVSS-aligned severity.

Incident response

If we identify a security event affecting Customer Data, we will notify the affected institution within 24 hours, before public disclosure. Each tenant has a named incident channel and a designated contact at OnePointe. A post-incident report is delivered within 14 days, with root cause, remediation, and any structural changes adopted.

Compliance & frameworks

Our program is built to recognized standards and evidenced, not asserted. We maintain a SOC 2 Type II report against the AICPA Trust Services Criteria for security, availability, and confidentiality; align controls to ISO/IEC 27001 and the NIST Cybersecurity Framework; operate as a FERPA school official under each Institution's direction; and publish a VPAT for WCAG 2.1 AA. Current reports and mappings are available under NDA in the security packet.

Business continuity & resilience

Production runs active-active across two U.S. regions. The audit log replicates synchronously (RPO 0 for audit data); the platform targets a five-minute RTO on regional failover. Encrypted backups are taken continuously and tested on a schedule, and we run disaster-recovery exercises at least annually. Availability status is published on the status page.

Responsible disclosure

If you believe you have found a vulnerability, write to security@onepointe.ai with enough detail to reproduce it. We will acknowledge within two business days, keep you updated, and will not pursue good-faith research that respects our users' privacy and avoids service disruption or data destruction. Please give us reasonable time to remediate before any public disclosure.

Privacy policyEffective 2026-01-01

Privacy policy.

This policy explains what OnePointe collects, how we use and share it, how long we keep it, and the choices you have. It is written to be read. If anything is unclear, write to privacy@onepointe.ai and we will explain or rewrite it.

At a glance

You control case data

For case data, the Institution is the controller. OnePointe processes it only on documented instructions under a Data Processing Agreement.

We do not sell personal information

No selling, no advertising use, and no third-party ad tracking on any OnePointe property.

Retention follows your rules

Case data is retained per the Institution's configured retention and legal-hold rules, with deletion recorded in the audit chain.

No training on your data

AI features are advisory and run under commercial terms that prohibit training on customer content.

OnePointe Technologies (“OnePointe,” “we,” “us”) is a case management technology company headquartered in Portland, Oregon. We provide software to colleges, universities, PK-12 districts, government agencies, employers, nonprofits, and similar institutions and organizations (“Institutions”). This policy applies to our public website and to the OnePointe platform where the platform links to it.

The two roles we play

For case data - the reports, parties, evidence, and records an Institution manages in the platform - the Institution is the controller and OnePointe is the processor, acting only on the Institution's documented instructions under a Data Processing Agreement. This policy does not govern an Institution's own handling of that data; the Institution's own privacy notices and applicable laws (including FERPA) do. For website visitors, prospective customers, applicants, and platform user-account data, OnePointe is the controller, and this policy describes our practices directly.

Information we collect

Information you provide. When you request a demo, contact us, apply for a role, or subscribe, you may give us your name, institutional email, phone, organization and role, the materials you upload (such as a resume), and anything you write to us.

Information provided by an Institution. To provision the platform, an Institution gives us the names, institutional emails, roles, and single-sign-on identifiers of the users it authorizes.

Case data (as processor). Institutions and their users enter reports, narratives, evidence, and decision records into the platform. The Institution decides what is entered; we do not collect it independently and we process it only under the Institution's instructions.

Information collected automatically. When you use the website we collect standard log and device information - IP address, browser and device type, pages viewed, links clicked, and timestamps - through cookies and similar technologies described in our cookie statement.

How we use information

As controller, we use information to: provide and secure the website; respond to inquiries and demo requests; evaluate job applications; deliver, support, and improve the platform for the Institutions that license it; process billing under a Platform Agreement; send service and security notices; conduct limited product and marketing analytics; enforce our terms and prevent fraud or abuse; and comply with law. As processor, we use case data only to provide the platform to the Institution and as its agreement directs.

AI processing

The platform's AI features draft, flag, summarize, and suggest, and are advisory only. Case content is processed for a single Institution and a single permission context at a time, through Anthropic's Claude models under commercial terms that prohibit training on customer content. We do not use Customer Data to train models - ours or anyone's - and AI never reaches a finding, determination, or record without a named human. See the AI layer documentation for the full boundaries.

How we share information

We do not sell personal information. We share it only as follows:

Service providers (subprocessors) - vendors that host, deliver email, or monitor the service, each under contract to protect the data and use it only to serve us. The current list is on the subprocessors page.
The Institution - case data is visible to the Institution's authorized users according to the permission model it configures.
For legal reasons - to comply with law, respond to lawful requests, enforce our agreements, or protect the rights, safety, and property of OnePointe, our users, or the public.
Corporate transaction - in a merger, acquisition, or sale of assets, in which case the successor remains bound by this policy or gives notice of any change.
With your consent - or as otherwise disclosed at the point of collection.

How we secure information

We protect information with layered administrative, physical, and technical safeguards: encryption in transit and at rest, single-tenant isolation, least-privilege access, monitoring, and an append-only audit trail. Our practices are described on the security page. No system is perfectly secure, and we cannot guarantee absolute security, but we hold ourselves to recognized frameworks and test against them.

How long we keep information

As controller, we keep information only as long as needed for the purpose it was collected, then delete or de-identify it, subject to legal retention. As processor, we retain case data per the Institution's configured retention and legal-hold rules; deletion is recorded in the audit chain without retaining the deleted content. Applicant materials are kept for the current hiring cycle and a reasonable period after, unless you ask us to remove them sooner.

Your choices & rights

Where we act as controller, you may request to access, correct, delete, port, or restrict the personal information we hold about you, and object to certain processing such as marketing. To exercise a right, contact our Data Protection Officer at dpo@onepointe.ai. Where we act as processor, direct your request to the Institution that controls the data, and we will assist them. We do not make decisions producing legal effects about you through solely automated means.

Children's privacy

The website is not directed to children, and we do not knowingly collect personal information from children through it. Where an Institution uses the platform in a PK-12 context, the Institution controls that data and is responsible for the consents and protections that apply to students, including under FERPA and applicable state law; we process it solely as the Institution's processor.

FERPA, HIPAA & sector obligations

Case records an Institution stores in the platform may be education records subject to FERPA. OnePointe acts as a “school official” with a legitimate educational interest under the Institution's direction and uses such records only to provide the service. Where an Institution's use brings data within other regimes, the applicable terms are addressed in the Platform Agreement.

Analytics & marketing

On the public website we use limited, privacy-preserving analytics to understand which pages are useful; this is off until you opt in through the cookie banner and is never enabled inside the authenticated platform. We do not run behavioral advertising, and we do not permit third-party advertising cookies on our properties. You can manage optional analytics through the banner or your browser.

Cross-border data

OnePointe hosts and processes Customer Data in the United States. We do not transfer Customer Data to non-US infrastructure in the ordinary course. If you contact us from outside the United States, the information you send will be processed in the United States under this policy.

Your regional rights

California. California residents have rights under the CCPA/CPRA to know, access, correct, and delete personal information and to opt out of “sale” or “sharing.” We do not sell or share personal information as those terms are defined. Personal information we process as a service provider on an Institution's behalf is exempt; direct those requests to the Institution.

EU / UK / Switzerland. Where we are a controller and the GDPR or UK GDPR applies, our lawful bases are consent, contract, and legitimate interests, and you have rights of access, rectification, erasure, restriction, objection, and portability, and to withdraw consent and lodge a complaint with a supervisory authority. Where we are a processor, contact the Institution as controller.

Third-party sites

The website may link to third-party sites we do not control. This policy does not apply to them, and we are not responsible for their practices. Review the privacy policy of any site you visit.

Changes to this policy

We may update this policy to reflect changes in our practices or the law. We will post the revised policy here with a new effective date and, for material changes, provide additional notice where appropriate.

Contact us

For any privacy question or request, write to privacy@onepointe.ai or OnePointe Technologies, Oregon Square, Portland, Oregon. We answer every message ourselves.

Effective January 1, 2026. This policy supports, and is subordinate to, the Data Processing Agreement in any signed Platform Agreement.

Terms of UseEffective 2026-01-01

Terms of Use.

These Terms govern access to the OnePointe marketing site and, together with the signed agreement between OnePointe and an Institution, the OnePointe platform. By using the Site you accept these Terms. If you do not agree, do not use the Site.

At a glance

The Platform Agreement controls

Institutions use the platform under a signed agreement. Where it conflicts with these Terms, the signed agreement wins.

Plain-language Site terms

These Terms govern the marketing site and the OnePointe services that link to them.

Your responsibilities, defined

Use the Site lawfully, keep credentials confidential, and respect OnePointe intellectual property.

Liability is limited

OnePointe's liability for Site claims is capped as described in the limitation of liability section.

In these Terms, OnePointe (also we, us, or our) means OnePointe Technologies, a Delaware corporation headquartered in Portland, Oregon, affiliated with Fractional Coordinator, Inc. The Site means this website and any OnePointe website, application, API, email notification, or other service that links to these Terms. You means the individual or entity using the Site. Where you use the Site on behalf of an Institution, you represent that you are authorized to bind that Institution to these Terms.

Acceptance & changes

Using the Site constitutes acceptance of these Terms. We may revise these Terms at any time by posting an updated version to this page with a new effective date. Continued use of the Site after a change takes effect is acceptance of the revised Terms. We recommend reviewing this page periodically.

Relationship to the platform agreement

Access to the OnePointe platform is licensed to Institutions under a separate signed agreement (the Platform Agreement), which includes a Data Processing Agreement and, where applicable, a service-level commitment. If any conflict exists between these Terms and a Platform Agreement, the Platform Agreement controls with respect to the platform. These Terms govern the public Site in all cases.

Who may use the Site

You must be at least 16 years of age to use the Site. The Site is intended for Institution staff, prospective customers, applicants, and members of the public seeking information about OnePointe. It is not the intake channel for a report; if you need to file a report, use the intake link provided by your Institution.

OnePointe intellectual property

The Site and its content, software, and features - including text, graphics, logos, icons, images, and the selection and arrangement of them (the OnePointe Content), and the OnePointe name, the wordmark, and the terminal point (the Marks) - are the property of OnePointe or its licensors and are protected by intellectual-property laws. Nothing in these Terms grants you a right to use the Marks or any confusingly similar mark.

Limited license to you

Subject to these Terms, OnePointe grants you a personal, non-exclusive, non-transferable, revocable license to access the Site and to download or print a single copy of publicly available content for your own reference. This license does not permit republication, redistribution, aggregation, resale, or any commercial use of the OnePointe Content without our prior written permission.

Restrictions on use

You will not: (a) remove or alter any proprietary notice; (b) reproduce, use, or imply endorsement through any Mark; (c) modify, create derivative works of, decompile, or attempt to extract source code from the Site except as permitted by law; (d) copy or adapt the Site's underlying code; (e) use any automated means - bot, spider, scraper, or similar - to access, harvest, or index the Site other than standard search-engine crawling of public pages; (f) probe, scan, or test the vulnerability of any system or breach any security or authentication measure; or (g) use the Site in a way that violates any applicable law or the rights of any third party.

Accounts & security

Certain areas require an account, provisioned to Institution personnel through the Platform Agreement and secured by single sign-on or passkey. You are responsible for activity under your account, for maintaining the confidentiality of your credentials, and for notifying us promptly of any suspected unauthorized access. We may suspend or reset access at our discretion where necessary to protect the platform or comply with law.

Content you submit

If you submit content to the Site - for example, a demo request, a job application, or an inquiry (User Content) - you represent that you have the right to submit it and that it is accurate. You grant OnePointe a non-exclusive, worldwide, royalty-free license to use that User Content for the purpose for which you submitted it. Customer Data entered into the platform is governed by the Platform Agreement and the privacy policy, not by this section.

Acceptable conduct

You will not post or transmit through the Site any content that is unlawful, infringing, defamatory, harassing, hateful, threatening, obscene, or that discloses another person's sensitive personal information without authorization; and you will not use the Site to bully, impersonate, or deceive. We may remove content or restrict access where we reasonably believe these Terms have been violated.

Privacy & data protection

Our handling of personal information in connection with the Site is described in the privacy policy, and our use of cookies in the cookie statement. Processing of Customer Data on the platform is governed by the Data Processing Agreement within the Platform Agreement.

Artificial intelligence

The platform includes AI features that draft, flag, summarize, and suggest. Those features are advisory only: they do not assign credibility, reach findings, determine outcomes, or finalize records, and every consequential action requires a named human. We do not train AI models on Customer Data. The AI provisions of the Platform Agreement govern the platform; nothing on the public Site is a determination of any matter.

Third-party content & links

The Site may link to third-party sites or reference third-party content. We do not control and are not responsible for third-party content, and a link is not an endorsement. Your use of any third-party site is governed by that site's own terms and policies, which you should review.

No professional advice

Content on the Site is provided for general information and does not constitute legal, compliance, or other professional advice, and does not create an attorney-client or advisory relationship. Institutions remain responsible for their own compliance decisions. You should consult qualified counsel for advice on a specific matter.

Reporting concerns

To report content or conduct that may violate these Terms, write to terms@onepointe.ai. For a security concern or vulnerability, write to security@onepointe.ai. To report a claim of intellectual-property infringement, include the work claimed to be infringed, the material at issue, your contact information, a good-faith statement, and a statement under penalty of perjury that you are authorized to act; send it to legal@onepointe.ai and we will respond in accordance with applicable law.

Disclaimers

The Site is provided on an "as is" and "as available" basis. To the fullest extent permitted by law, OnePointe disclaims all warranties, express or implied, including merchantability, fitness for a particular purpose, title, and non-infringement. We do not warrant that the Site will be uninterrupted, error-free, or free of harmful components, or that content is accurate or current. This section does not limit any warranty made expressly in a Platform Agreement.

Limitation of liability

To the fullest extent permitted by law, OnePointe and its officers, employees, and agents will not be liable for any indirect, incidental, consequential, special, or punitive damages, or for lost profits, data, or goodwill, arising from your use of the Site. Liability arising from a Platform Agreement is governed by that agreement. Nothing here limits liability that cannot be limited by law.

Indemnification

You agree to indemnify and hold harmless OnePointe from claims, losses, and reasonable expenses arising from your misuse of the Site, your violation of these Terms, or your violation of any law or third-party right, except to the extent caused by OnePointe.

Suspension & termination

We may suspend or terminate your access to the Site at any time where we reasonably believe you have violated these Terms or where necessary to protect the Site or comply with law. Sections that by their nature should survive - including intellectual property, disclaimers, limitation of liability, and indemnification - survive termination.

Governing law

These Terms are governed by the laws of the State of Oregon, without regard to conflict-of-laws principles. Any action relating to these Terms and the Site will be brought exclusively in the state or federal courts located in Multnomah County, Oregon, and you consent to their jurisdiction. Nothing in this section overrides a governing-law or dispute-resolution clause in a Platform Agreement.

Use outside the United States

OnePointe operates from and hosts within the United States. We make no representation that the Site or platform is appropriate or available for use in other locations. If you access the Site from outside the United States, you do so on your own initiative and are responsible for compliance with local law.

General

These Terms, together with the privacy policy, the cookie statement, and any applicable Platform Agreement, are the entire agreement between you and OnePointe regarding the Site. If any provision is held unenforceable, the remainder stays in effect. Our failure to enforce a provision is not a waiver. You may not assign these Terms; we may assign them in connection with a merger, acquisition, or sale of assets. Section headings are for convenience only.

Effective January 1, 2026. Questions: terms@onepointe.ai. These Terms are provided for the public Site; the Platform Agreement governs the licensed platform.

Accessibility statementWCAG 2.1 AA

Accessibility is a feature, not a finish.

OnePointe is designed to be usable by people with the full range of vision, hearing, mobility, and cognitive abilities. We hold ourselves to WCAG 2.1 Level AA across the product, including the public intake form that anyone may need to reach in a hard moment.

At a glance

WCAG 2.1 Level AA

The product and the public intake form are built and tested to WCAG 2.1 AA before release.

Tested with real assistive technology

NVDA, JAWS, VoiceOver, and TalkBack on every release, plus keyboard-only and reduced-motion passes.

Honest about gaps

Known limitations are listed on this page with dates, and remediation is tracked to completion.

One business day

We aim to respond to accessibility reports within one business day.

Our standard

OnePointe conforms to WCAG 2.1 Level AA across the platform and the public intake form. We test against this standard before release and remediate as conformance regresses.

How we work

Design review against accessibility heuristics on every screen.
Automated checks in CI (GitHub Actions plus axe-core via Playwright).
Manual review with NVDA, JAWS, VoiceOver, and TalkBack on each release.
User research with assistive technology users at major release milestones.
A current VPAT, available on request under NDA.

Known limitations

Interactive heat map - keyboard-only navigation is functional but not yet ideal. Q3 2026.
Drag-and-drop reordering - keyboard alternative ships Q2 2026.
Legacy embedded reports - third-party embeds that have not yet been re-tagged for accessibility. Replacement in progress.

Compatible technology

OnePointe is tested with current and previous major versions of:

Chrome, Edge, Safari, and Firefox on desktop and mobile.
NVDA on Windows with Chrome and Firefox.
JAWS on Windows with Chrome and Edge.
VoiceOver on macOS Safari and iOS Safari.
TalkBack on Android Chrome.
Dragon NaturallySpeaking, ZoomText / MAGic, and switch access.

Get in touch

If you encounter a barrier or have a specific access need, write to hello@onepointe.ai. We aim to respond within one business day. Please include the page or screen, what you were trying to do, and the assistive technology you were using; it helps us reproduce and fix the issue quickly.

If we cannot resolve it

If a barrier prevents you from completing something that matters and we have not resolved it to your satisfaction, ask for it to be escalated to our accessibility lead, who will provide a written response and a target remediation date. Institutions may also raise unresolved concerns through their contract's support channel. Nothing here limits any right you may have under the Americans with Disabilities Act, Section 504 of the Rehabilitation Act, or applicable state law.

Standards we align to

Our standard is WCAG 2.1 Level AA across the platform and the public intake form. We also align to Section 508 of the Rehabilitation Act and EN 301 549 for institutions that require them, and we document conformance in a VPAT / Accessibility Conformance Report available on request. Where a criterion is not yet fully met, it is listed under known limitations above with a target date.

The intake form comes first

The complainant-facing intake form is held to the highest bar we apply, and a WCAG 2.1 Level AAA build is in preview. The reasoning is simple: the person reaching that form may be having the worst week of their year, may be using assistive technology, and may need to leave quickly. The calmer and more reachable that front door is, the better the rest of the case goes.

Basis & review

This statement reflects OnePointe as of the platform version noted in the changelog, is reviewed on each major release, and describes conformance measured against the Web Content Accessibility Guidelines (WCAG) 2.1 Level AA success criteria. A current VPAT / Accessibility Conformance Report is available on request.

Statement effective January 1, 2026, and reviewed each major release. Report a barrier: hello@onepointe.ai.

ContactWe answer every message ourselves

Talk to a real practitioner.

Whether you are evaluating OnePointe for your institution or you already run it, here is how to reach the right person - usually a former coordinator or dean, not a sales rep. Average reply under four hours during the business day.

Talk to sales →Get support →

Talk to sales

Evaluating OnePointe for your institution?

Tell us a little about your institution and what you are trying to solve. We will match you with someone who has held the coordinator or investigator seat and can speak to your actual workflow.

A 30-minute walkthrough led by a peer, not an SDR
We model your sanitized scenarios live
You leave with a security packet for your CIO
Honest, published pricing - no games

Prefer to skip ahead? Book a walkthrough directly or get started.

Sales inquiry

First name *

Last name *

Title / role *

Institutional email *

Phone

Institution *

Institution type *

Approx. enrollment *

Current case management

What brings you to OnePointe? *

Timeline

Anything you would like us to know?

How did you find us?

A former coordinator replies within one business day.

Other ways to reach us

Product support

Already running OnePointe? Reach the team that knows your deployment.

support@onepointe.ai →

Security & trust

Diligence questions, the security packet, or vulnerability reports.

Request the packet →

Partnerships

Founding-partner pricing and a three-year agreement priced to ramp.

Partner program →

Press & media

Interviews, background, and company facts for the newsroom.

press@onepointe.ai →

Careers

We hire slowly and on purpose. Several roles are reserved for practitioners.

See open roles →

General

Anything else. We read and answer every message ourselves.

hello@onepointe.ai →

Our office

CompanyOnePointe Technologies

HeadquartersOregon Square, Portland, Oregon

Salessales@onepointe.ai

Supportsupport@onepointe.ai

HoursMonday–Friday · 8am–6pm Pacific

AffiliationFractional Coordinator, Inc.

nePointe^®

Request a demo

Tell us who is coming and what you want to see.

01 · Who's coming

First name *

Last name *

Institutional email *

Phone *

Institution *

Role *

Decision timing

How did you find us?

Anything we should know before we meet?

Prefer email? Contact us · Back to onepointe.ai

Partner Institution ProgramFounding-partner pricing

One agreement, priced to ramp.

We partner with institutions on a single three-year agreement, in exchange for honest feedback and a willingness to shape the product alongside us. Year one begins at $2,000 plus $250 per month. Year two runs at half the published rate. Year three settles at $1.75 per student, locked as your founding-partner rate for the life of the relationship.

$2,000 to begin$250 / mo · first 12 months30-day exit if performance commitments are not met90-day transition support at termination

What's included

A real partnership, not a trial.

Full platform access

Every feature, at full depth. The same software our paying customers run, no tier limits. Core modules included; add-ons optional.

Hands-on implementation

Data migration, SSO setup, workflow configuration, and staff training, on-site or remote.

Dedicated implementation support

A dedicated success manager, priority response, and quarterly performance reviews to refine workflows.

Yours to keep

Records, workflows, and configuration exported in standard formats at any time. No data lock-in.

Founding-partner pricing

Year one at $5,000 all-in, year two at half the published rate, and the published rate locked from year three for the life of the relationship.

A voice in the roadmap

Direct input into features and module priorities. What you need from this work helps shape what we build next.

OpenNow accepting institutions

$2KTo begin · year one

$250Per month · first 12 months

What partners commit: an executive sponsor · quarterly feedback sessions · roadmap input · a reference or case study at month twelve.

Secure form

Your name *

Title *

Institutional email *

Phone *

Institution *

Institution type *

Enrollment *

Current case management

Why are you applying? *

Executive sponsor (name & title) *

How did you find us?

Applications reviewed weekly. Open to institutions of every size.

Security packet requestDiligence

A briefing your CIO can actually use.

A nine-document packet, delivered under mutual NDA via DocuSign. Designed for CIO, CISO, General Counsel, and procurement review.

SOC 2 Type II WCAG 2.1 AA FERPA school official US-hosted single-tenant AES-256 encrypted

How to request it

1Ask

Send the request below or write to trust@onepointe.ai from an institutional address.

2Mutual NDA

We return a short mutual NDA via DocuSign the same day. Countersign at your pace.

3Delivered

The full packet arrives within two business days of a countersigned NDA, with a named engineer to answer questions.

What's in the packet

SOC 2 Type II readiness summary

Our control environment mapped to AICPA Trust Services Criteria, with the independent Type II report for the 12-month period ending February 28, 2026 available under NDA.

Penetration test executive summary

A redacted summary of our most recent third-party penetration test. The detailed report is available under NDA via your account manager once each engagement is complete.

FERPA addendum and school official designation

Our standard FERPA School Official Designation language, ready to attach to your subscription agreement.

Data Processing Addendum (DPA)

Standard contract clauses for data processing under FERPA, GDPR, and applicable state privacy laws.

Business continuity and disaster recovery plan

RPO/RTO commitments, backup architecture, failover procedures, and the results of our most recent DR exercise.

Subprocessor list with flow-down terms

Every vendor that touches your data, what they do, where they are hosted, and the contractual flow-down terms.

VPAT (WCAG 2.1 Level AA conformance)

Voluntary Product Accessibility Template documenting WCAG 2.1 AA conformance, with exceptions noted honestly.

Incident response plan with notification SLA

Our notification commitments, escalation paths, and post-incident reporting standards.

One-page summary for the CIO

A short executive overview your CIO can read in five minutes and forward to their team.

Send the request

Secure form

Your name *

Title *

Institutional email *

Phone

Institution *

Role *

What's prompting this review?

How did you find us?

NDA sent within one business day. Packet delivered within two of execution.

Applicationcareers@onepointe.ai

Apply to OnePointe.

Resumes tell us where you have been. This application tells us how you think and what you have actually shipped. It takes a little longer than a one-click apply, on purpose - we read every one ourselves, and reply.

About you

The basics.

Full name * Email * Phone Role * Location Years of relevant experience LinkedIn Portfolio, site, or GitHub

Show us your work

Prove it, in your words and your work.

Answer what is relevant to your role, and attach the work that backs it up. Specifics beat polish - we would rather see one real thing you built and understand exactly what you did than read a page of adjectives.

What have you built, shipped, or resolved that you are most proud of? * Walk us through a hard problem or case you owned end to end. * This work carries real weight. Why does it matter to you, and why OnePointe? * Anything specific to this role we should know? Skills, tools, or experience that make you a fit.

Your work, beyond the CV

Attach the things that show your judgment - a document, a deck, a writing sample, a case study, code, or a design. This is what we look at first.

Primary work sample *The one thing that best represents your work. Up to 15 MB.

Additional materialsOptional. Writing, code, case studies, references. Multiple files allowed.

Resume or CVOptional. We read work samples first.

A link to more of your work References

How we hire

What happens next.

We read it ourselves

Every application reaches the hiring team directly, and we reply. Work samples and references from people you have actually shipped with carry the day - resumes are optional.

A conversation, not a gauntlet

If there is a fit, you talk with the people you would actually work with. We go deep on the work you described here.

A practical exercise

For some roles, a short exercise or a closer look at the work you submitted, reflecting the real work. We are evaluating each other.

References and offer

We speak with your references, then move quickly. Engineering is fully remote with quarterly weeks in Portland; our administrative staff work in person at our Oregon Square headquarters.

Your application goes directly to the hiring team. Fields marked * are required.

Platform statusChecked today

System health.

The current operational status of the OnePointe platform, by component. This page reflects the latest daily health snapshot and any active incidents.

All systems operational

No incidents reported.

Components

Incident history

Operational Degraded Partial outage Major outage Maintenance

Status reflects the most recent daily snapshot. To receive incident notifications, write to trust@onepointe.ai.

NewsroomNews · writing · press

News from OnePointe.

Announcements, product milestones, and writing from the team. For interviews, background, or brand assets, write to press@onepointe.ai. We answer every message ourselves.

AnnouncementJune 2026

A quietly intelligent platform for the work institutions take most seriously.

OnePointe enters general availability with one front door for reports, one case file, and one defensible audit trail across Title IX, Title VI, Title VII, conduct, ADA/504, and behavioral intervention. A note from the founder on why it exists, and what it will never do.

Read the note

ProductJune 12, 2026

National-origin claims join the module list

National-origin discrimination claims are available as an add-on module, running on the same dashboard, intake, and audit trail as every other module. Activate the coverage for your workspace when your institution needs it.

Changelog →

ProductJune 2026

The platform, documented

A full technical reference opens: architecture, the data model, the AI layer built on Claude, and the developer surface - API, webhooks, and SIEM export.

Read the docs →

AnnouncementMay 2026

The Partner Institution Program opens

One agreement priced to ramp, and a rate locked for the life of the relationship, for institutions ready to move. Applications are open now.

See the program →

Field noteQ3 2026

The first 72 hours

The intake decisions that quietly decide a case - and how to make them the same way every time. First in a series of practitioner field notes.

In preparation

ProductApril 22, 2026

Workplace (Title VII) reaches general availability

Workplace investigations join the platform, sharing the same case file and record as every academic module.

Changelog →

GuideQ3 2026

Evaluating case management platforms

The criteria that matter, the questions to put to any vendor, and how to score the answers - written for the coordinator building the procurement file.

In preparation

The brand, in brief

Case Management / AI-powered / Built for operational compliance

Sensitive cases, handled with the care they deserve.

The signature line - OnePointe's primary expression. Lead with it.

What we are

OnePointe is a quietly intelligent case management platform for the teams that handle civil-rights, conduct, and workplace investigations. One front door, one case file, one defensible audit trail.

The voice

It drafts. It flags. It summarizes. It never decides.

Canonical. Quote verbatim - do not paraphrase.

The name

Always OnePointe - one word, capital O and P. Never "One Pointe," "Onepointe," or "1Pointe." Legal entity: OnePointe Technologies. Affiliation: Fractional Coordinator, Inc.

The point

The orange terminal point is part of the mark. Do not recolor, resize, or remove it.

The wordmark

OnePointe^® OnePointe^®

The mark & wordmark

nePointe^® nePointe^®

Newsreader, italic Pointe, orange point. The mark forms the “O” in the primary lockup; use the wordmark alone only where the mark cannot render.

The palette

Click a swatch to copy its hex. Full asset kit (SVG, PNG, clear-space) on request.

The mark

The aperture mark, which also forms the “O” in the wordmark. Keep clear space around it, and do not rotate or recolor it outside the palette.

Download the mark

For light backgroundsMark · ink · PNG↓ For dark backgroundsMark · cream · PNG↓

Transparent PNG, 512 px. Vector (SVG) and full lockups available on request.

For press

About OnePointe. OnePointe is a quietly intelligent case management platform for the teams that handle civil-rights, conduct, and workplace investigations. Built by practitioners, it gives institutions and organizations one front door for reports, one case file, and one defensible audit trail, with AI that drafts, flags, and summarizes without ever deciding. OnePointe Technologies is headquartered in Portland, Oregon.

Press inquiries and brand-asset requests: press@onepointe.ai.

Quick facts

CompanyOnePointe Technologies

HeadquartersPortland, Oregon

Founded2026

CategoryCivil-rights & workplace case management

Presspress@onepointe.ai

nePointe^®

New to OnePointe? Create your workspace

Back to onepointe.ai

nePointe^®

Product updatesCommunications

What changed, and why.

Every release, every security-relevant change, every deprecation. Written for the people who own the audit when it arrives.

Release notes, the morning they ship. No marketing, ever.

The record

ReleaseDesktopJuly 1, 2026

Command bar ships in the OnePointe desktop app

The OnePointe desktop app for macOS and Windows now includes a downloadable command bar. Press ⌘K (Ctrl K on Windows) from anywhere in the app to jump straight to a case, an open investigation, an upcoming deadline, or a person, without leaving the keyboard. The desktop app installs alongside your browser access and signs in through your institution’s single sign-on, so there is nothing new to provision. Download it, sign in, and the command bar is there.

ReleasePlatformJune 12, 2026

Title VI module ships at no additional charge

Title VI cases now flow through the same dashboard as Title IX and Conduct. OCR-aligned intake, complaint procedures, and resolution workflows are included for every Institution on a current contract. No new SKU, no new line item.

Documentation →What's included →

UpdateAudit trailMay 28, 2026

Audit log SIEM export adds Microsoft Sentinel

Native pipeline to Microsoft Sentinel joins Splunk, Datadog, and Sumo Logic. Configure in Settings → Integrations → SIEM.

SIEM export docs →

SecurityCVSS 4.2May 14, 2026

Dependency advisory: third-party PDF rendering library

We updated our PDF rendering dependency in response to a publicly disclosed CVE. No Customer Data was affected. Production patched within 8 hours of disclosure.

Security practices →

ReleasePlatformApril 22, 2026

Workplace (Title VII) module general availability

Title VII workplace investigations are now generally available, sharing the same case file, audit trail, and dashboard as Title IX and Conduct. Available to all Institutions on a current contract.

The modules →

UpdateSubprocessorsApril 5, 2026

30-day notice: Datadog added for monitoring

Datadog joins our subprocessor list for application and infrastructure monitoring. Customer Data is not transmitted to Datadog. The current subprocessor list lives at /subprocessors.

ReleasePlatformMarch 12, 2026

Public intake form: WCAG 2.1 AAA preview

A new build of the public intake form is in preview at WCAG 2.1 Level AAA. The complainant-facing surface is the calmer that front door, the better the rest of the case goes. General availability planned for Q3 2026.

Accessibility statement →

You have reached the beginning of the record. Ask us anything →

Stay in the loop

Questions about a change?

Release notes, security changes, and deprecations, written for the people who own the audit. Ask us anything, or subscribe above for the morning they ship.

Ask us anything Documentation ▸

Subprocessor listCurrent as of 2026-06-01

The small set of vendors behind the platform.

A subprocessor is a third party OnePointe engages to help deliver the service. We rely on a deliberately small group, each bound by contract to protections at least as strong as those in our own agreement with your Institution. This page is the current, authoritative list.

At a glance

A deliberately small list

Three infrastructure vendors plus the AI provider, each named on this page.

Bound by contract

Each subprocessor is held to protections at least as strong as our agreement with your Institution.

Processing in the United States

Customer Data is processed and stored in US regions, with in-country failover.

30 days notice, right to object

Institutions receive at least 30 days notice before any subprocessor change, with a documented right to object.

Current subprocessors

Amazon Web Services

Production hosting, storage, and key management. us-east-1 primary, us-west-2 failover. SOC 2, ISO 27001, and FedRAMP authorizations. May process Customer Data at rest and in transit within the United States.

United States

Postmark

Transactional email delivery for system notifications, account events, and audit alerts. Processes recipient address and message metadata only. No marketing email, no case content.

United States

Datadog

Application and infrastructure monitoring, performance telemetry, and security-event aggregation. Configured to exclude Customer Data from logs and traces.

United States

This list is authoritative and versioned. The AI layer is delivered through Anthropic's API under commercial terms that prohibit training on customer content; where a model provider processes prompt content to return a result, it does so as a subprocessor under those terms. See the AI layer documentation and privacy policy for the boundaries that govern it.

How we vet a subprocessor

Security and privacy review before engagement, including current SOC 2 or ISO 27001 evidence.
A signed data processing agreement with confidentiality and breach-notification obligations at least as protective as ours.
Data minimization by default: each subprocessor receives only the categories of data its function requires, and no more.
Periodic re-review, and removal when a vendor is no longer needed.

Categories of data shared

Most subprocessors never touch Customer Data. Hosting (AWS) processes it under encryption; email delivery processes routing metadata; monitoring is configured to exclude it. Where a subprocessor could process Customer Data, the row above says so plainly.

International transfers

OnePointe is hosted in the United States, and our subprocessors process data in the United States. We do not transfer Customer Data outside the U.S. in the ordinary course. If that ever changes, we will update this page and provide the notice described below before the change takes effect.

Change notification & your right to object

We give Institutions at least 30 days notice before adding or replacing any subprocessor that processes Customer Data. To receive these notifications, or to raise a reasonable objection to a proposed subprocessor on data-protection grounds, write to subprocessors@onepointe.ai. Objection handling, including your remedies if an objection cannot be resolved, is governed by the data processing agreement in your contract.

This page supports our commitments under the Data Processing Agreement. In any conflict between this page and a signed agreement, the signed agreement controls.

Cookie statementEssential by default

Cookie statement.

This statement explains what cookies are, which ones OnePointe uses, and how you control them. For the fuller picture of how we handle personal information, see the privacy policy.

At a glance

Essential by default

Only essential cookies are set unless you opt in to more.

Analytics is opt-in

Aggregated and de-identified, and never enabled inside the authenticated platform.

No cross-site ad tracking

No interest-based advertising cookies and no third-party ad networks on any OnePointe property.

You are in control

Change your choices at any time via the Cookie preferences link in the footer.

What cookies are

Cookies are small text files a website asks your browser to store on your device. They let a site remember information between visits - such as keeping you signed in or remembering a preference. Cookies cannot read other files on your device, and the ones described here do not carry case data.

Our approach: essential by default

OnePointe sets essential cookies only unless you choose otherwise. Non-essential cookies stay off until you opt in through the banner, and we honor that choice on the device that made it. We do not use interest-based advertising or cross-site tracking cookies on any OnePointe property, and none are permitted inside the authenticated platform beyond what the platform needs to function.

The categories we use

CategoryWhat it does

Sign-in & securityAuthenticates you, keeps a session active, and protects forms against cross-site request forgery. Essential; cannot be switched off.

PreferencesRemembers choices such as your cookie decision so we do not ask again. Essential for the choice to persist.

AnalyticsOptional. Aggregated, de-identified usage of the marketing site to see which pages are useful. Off until you opt in; never enabled in the authenticated application.

MarketingOptional. First-party referral and conversion measurement so we know which channels reach institutional buyers. Off until you opt in. No cross-site ad tracking.

Social mediaOptional. Embedded LinkedIn and X content sets cookies from those platforms when it loads. Off by default; embeds load only after you enable them.

AdvertisingNot used. We set no interest-based advertising cookies and permit no third-party ad networks.

The specific cookies

CookiePurpose · type · duration

op_sessionKeeps you signed in. First-party, strictly necessary. Session - expires on sign-out or idle timeout.

op_csrfCross-site request-forgery protection. First-party, strictly necessary. Session.

op_consentStores your cookie choice. First-party, strictly necessary. 12 months.

op_analyticsSet only if you opt in. First-party, aggregated analytics. 12 months.

How to control cookies

Use the banner on your first visit, or write to cookies@onepointe.ai at any time, to change your choice. You can also block or delete cookies through your browser settings; note that disabling essential cookies will stop parts of the site from working. Browser instructions: Chrome, Safari, Firefox, and Edge.

Do Not Track

Because we set no advertising or cross-site tracking cookies, there is nothing for a Do Not Track signal to switch off. We honor it regardless: a DNT signal keeps optional analytics off, whatever the banner says.

Changes & contact

We will update this statement if our cookie use changes and post the revised version here. Questions: cookies@onepointe.ai.

Last updated January 1, 2026.

DocumentationAPI v1

How OnePointe actually works.

Technical reference for the OnePointe platform: architecture, the data model, the AI layer, and the developer surface. Documented from the product as shipped. Institutions on a current contract have this library inside the admin console alongside a dedicated implementation engineer.

REF-A1 Architecture & tenancy

Every Institution runs in its own single-tenant environment: isolated database, isolated encryption keys, isolated compute. There is no shared table with a tenant_id column; there is no table your neighbors are in at all.

Regions & resilience

Production runs active-active across U.S. East and U.S. West. The case audit log replicates synchronously across regions (RPO 0 for audit data); failover is automatic with a five-minute RTO. All storage is encrypted with AES-256-GCM; Enterprise tenants hold their own keys via AWS KMS (BYOK) with rotation and revocation under their control.

Environments

Each tenant receives production and sandbox environments. Sandbox mirrors production configuration with synthetic data, and is the required target for API integration testing: sandbox credentials cannot read production records.

Release trains

Platform releases ship monthly; security patches ship out-of-band. Every release, including model-version changes in the AI layer, is documented in the changelog with migration notes where behavior changes.

REF-A2 Data model

OnePointe's record system is a small set of first-class objects. Identifiers are human-legible and stable: a prefix, the year, and a sequence, so CAS-2026-0418 reads the same in the UI, the API, the audit log, and a hearing transcript.

ObjectPrefix · description

IntakeINT- A submitted report, prior to triage. Immutable once received.

CaseCAS- The unit of work. Carries module, status, owner, and the thirteen file sections.

PartyPTY- A person in a role on a case: complainant, respondent, witness, advisor.

EventEVT- A timeline entry. Human-entered, system-generated, or an accepted AI draft.

EvidenceItemEVD- A file or exhibit with chain-of-custody metadata and source-aware timestamps.

InterviewRecordIVW- Formal interview documentation, distinct from private work-product notes.

TaskTSK- An open item or milestone on a case's ledger.

ApprovalAPR- A pending or resolved supervisor decision: interim measures, determinations.

CareRecordCRE- A behavioral-intervention entry in the CARE Network queue.

AuditEntryAUD- One append-only line in the access & modification log. Cryptographically chained.

Retention & legal hold

Retention policies apply per module and per object type; legal hold overrides retention at the case level and is itself an audited action. Deletion is a state, not an erasure of the audit chain: the log records that a record existed and was purged, without retaining its content.

REF-A3 Admin & permissions

Access is governed by five permission levels, assigned per person in Team & users and scoped per module: an investigator can hold L3 in Title IX and L1 everywhere else.

L1 · Reader

Read-only access. Can view dashboards, search policies, and follow assigned matters, but cannot edit cases or records.

read-only

L2 · Trainee

Works under direct supervision. Can document interactions on assigned cases but cannot finalize determinations.

supervised

L3 · Investigator

Independent caseload. Manages assigned investigations end to end and can request supervisor approval on key decisions.

independent

L4 · Senior

Senior investigator or coordinator. Runs complex cases, mentors trainees, assigns work, and approves interim measures.

approver

L5 · Supervisor

Compliance director. Supervises team workload, approves determinations, and sees all cases across the institution.

full scope

Approvals

Actions above a person's level route into an approval flow rather than failing silently: an L2's case note stands, but their proposed determination waits for L5 sign-off, and interim measures proposed by an L3 wait for an L4. Approvals are objects (APR-), carry their full decision thread, and land in the audit log with both actors.

Role configuration

Custom roles compose from the same permission primitives in Role configuration: advisors, hearing officers, and observers are common additions. The audit trail reads identically regardless of role naming.

REF-A4 Intake & routing

Every report enters through one front door. The public intake asks a single question, what would you like to do, and routes to the right form or a secure status check. Submissions become immutable Intake objects marked awaiting triage, where an L3 or above assigns a module, an owner, and an initial status.

Quick actions

Staff-originated records skip the public form: + New case opens a full case shell, + New CARE record starts a behavioral-intervention entry, and + New FYI note files an informational report that creates a record without opening a case.

The status lifecycle

Cases move through a fixed vocabulary so reporting stays consistent: in_review → investigation → interim_measures → hearing | informal_resolution → resolved → closed. Transitions are timestamped, attributed, exposed at PATCH /cases/{id}/status, and emitted as case.status_changed webhook events. SLA tracking measures the gaps between them.

REF-A5 The case file

A OnePointe case is one document with thirteen standing sections. Nothing lives in email or a side spreadsheet; if it matters to the case, it has a place in the file:

Who's involved and Parties to this case - people and roles, with contact posture
What's alleged - the allegation record, policy citations, and module classification
Where this case stands - current status, owner, deadlines, and SLA position
Case chronology - the unified timeline; AI-reconstructed entries carry draft state until an investigator accepts them
Formal interview records and Private notes from the case team - separated documentation with independent visibility rules
Case documents and evidence inventory - chain-of-custody metadata, source-aware timestamps
Messages with parties - platform-sent communications, logged verbatim
Generate standard documents - notices drafted from templates, filled from the record, held for human review
Status updates & supervisor review - the approval thread
Open items & completed milestones - the case's task ledger
Access & modification log - every view, edit, export, and approval, append-only

Hearings

Pre-hearing conferences, hearings, and check-ins are scheduled from the case and appear on every participant's Schedule with confirmation state; outcome records attach back to the file automatically and emit hearing.scheduled events for calendar integrations.

REF-A6 Everyday work

The Dashboard opens on what is most pressing: intakes awaiting triage, cases flagged high-risk, team caseload, and SLA position, with the day's schedule underneath. Tasks aggregates open items across every case you own or supervise; Schedule carries case context on every event; Direct Messages keeps coordination inside the tenant, logged, instead of in personal text threads.

People and the CARE Network

People is the institutional directory with case-aware context for authorized roles. The CARE Network gives behavioral-intervention teams a shared queue, meeting cadence, and de-identified escalation path that connects to Conduct or Title IX when a matter crosses lines.

The command bar

Press ⌘K anywhere to ask about cases, policy, or people. Retrieval is permission-scoped to records the person can already see, answers cite the record they drew from, and the interaction is logged. See the AI layer for the full contract.

REF-A7 Reports & audit

The Reports module produces the numbers institutions are actually asked for: caseload and SLA summaries, module breakdowns, Clery roll-ups ready for Public Safety's CSA submission, and the campus heat map of case density by building and time of day, de-identified with aggregation thresholds configurable per institution.

The audit trail

Every case carries an append-only access & modification log; the tenant-level Audit view unifies them for compliance review. Entries are hash-chained (each entry commits to the previous entry's hash), replicated synchronously across regions, and exportable. Neither customers nor OnePointe can disable the log. Schema and streaming options are documented under Audit export & SIEM.

Exports

Cases, reports, and logs export in standard formats at any time via the UI or POST /exports, including full OCR-ready case assembly: the whole record, in order, with the log attached.

REF-B1 The AI layer · Claude

OnePointe's intelligence layer is built on Anthropic's Claude models, invoked through Anthropic's API under commercial terms that prohibit training on our customers' content. Institutional case data is never used to train models, ours or anyone's, and never crosses tenant boundaries: each invocation is scoped to a single tenant and a single permission context.

What it does

Timeline reconstruction - builds structured chronologies from case records, emails, interview summaries, and uploaded documents, surfacing sequence gaps and policy-relevant milestones
Interview question drafting - calibrated to the case's facts, with tone configurable per institution from formal to trauma-informed
Document drafting - notices and letters generated from templates and the case record, held for human review before sending
Investigation report drafting - assembles a structured draft report from the meeting notes, evidence files, and party and witness statements in the case file, with every assertion cited to the record and held for the investigator to verify and finalize
Summarization - the long file, condensed, with citations back to the record
The ⌘K command bar - retrieval-augmented answers over records the asker is already permitted to see

The contract: advisory, always

Every AI output is advisory, editable, and quarantined as a draft until a permitted human accepts it. AI-generated timeline entries carry draft state; generated documents cannot send themselves; the command bar answers questions and takes no actions. The system will not produce determinations, credibility findings, or sanction recommendations, by design and by policy, and requests for them are declined and logged.

Data boundaries

Context minimization - invocations receive only the case-scoped fields the feature requires, never bulk records
Permission-scoped retrieval - the command bar's retrieval index respects L-levels and module scoping; the model cannot see what the asker cannot
No training, no retention - customer content is excluded from model training and is not retained by the model provider beyond request processing
Model pinning - tenants run pinned Claude model versions; version changes ship through the release train with changelog notice, never silently
Kill switch - administrators can disable AI features per module; disablement is immediate and audited

Every invocation is logged

AI activity is a first-class citizen of the audit trail. Each invocation writes an AuditEntry recording the feature, the model version, the actor whose permission context scoped it, and the disposition of the output:

{ "id": "AUD-2026-118204", "ts": "2026-04-18T17:09:00Z", "action": "ai.draft.generated", "actor": { "type": "system", "on_behalf_of": "usr_reyes_j", "level": "L4" }, "object": { "type": "Event", "id": "EVT-2026-90312", "case": "CAS-2026-0418" }, "detail": { "feature": "timeline.reconstruction", "model": "claude-sonnet-4-6", "sources": 41, "disposition": "draft.pending_review" }, "prev_hash": "9f2ac41b…", "hash": "5d17e08a…" }

REF-C1 Authentication & identity

People sign in with SAML 2.0 or OIDC on every plan, or with passkeys (WebAuthn / FIDO2). SMS is not offered as a primary factor. SCIM 2.0 handles provisioning and deprovisioning against your identity provider; deprovisioning revokes active sessions within minutes. Sessions support configurable idle timeout, IP allowlists, and forced re-authentication on sensitive actions such as exports and role changes.

API authentication

Server-to-server access uses OAuth 2.0 client credentials; scoped personal access tokens are available for administrative scripting. Tokens are tenant-bound and scope-limited:

ScopeGrants

cases:readRead cases, timelines, and parties within permitted modules

cases:writeCreate cases, append events, update status

intake:writeSubmit intakes programmatically (kiosk and partner-system integrations)

audit:readRead and stream audit entries

reports:readRun and retrieve reports, including Clery roll-ups

webhooks:manageCreate and manage webhook subscriptions

REF-C2 REST API

Base URL https://api.onepointe.ai/v1. JSON in, JSON out; cursor pagination via next_cursor; idempotency keys honored on all POST requests. Rate limit: 600 requests per minute per tenant, with 429 responses carrying Retry-After. Sandbox and production use separate credentials and hosts.

MethodPathDescription

GET/casesList cases; filter by module, status, owner, updated_since

GET/cases/{id}Retrieve a case with its section summaries

POST/casesCreate a staff-originated case shell

PATCH/cases/{id}/statusTransition status within the fixed lifecycle

GET/cases/{id}/timelineChronology events, including draft-state AI entries

POST/intakesSubmit an intake programmatically

GET/audit-entriesQuery the audit log; filter by case, actor, action

POST/exportsRequest a case assembly, report, or log export

GET/reports/cleryClery roll-up for a date range, CSA-submission ready

curl https://api.onepointe.ai/v1/cases/CAS-2026-0418 \ -H "Authorization: Bearer $ONEPOINTE_TOKEN" { "id": "CAS-2026-0418", "module": "title_ix", "status": "investigation", "owner": { "id": "usr_reyes_j", "level": "L4" }, "parties": 3, "evidence_items": 6, "timeline_events": 11, "sla": { "state": "on_track", "next_deadline": "2026-04-24" }, "created": "2026-04-18T16:12:36Z" }

The full reference with request and response schemas for every endpoint ships with the public library in Q3 2026; customers can request early access through their implementation engineer.

REF-C3 Webhooks

Subscriptions deliver signed JSON to your endpoint. Signatures are HMAC-SHA256 in the X-OnePointe-Signature header; deliveries retry with exponential backoff for 24 hours; event payloads carry object references, never full record content, so your receiver fetches details through the API under its own scopes.

EventFires when

intake.receivedA public or programmatic intake is submitted

case.createdA case is opened from an intake or a quick action

case.status_changedA lifecycle transition occurs

case.assignedOwnership or team assignment changes

interim_measure.approvedAn L4+ approves proposed interim measures

hearing.scheduledA hearing or pre-hearing conference is set

document.generatedA standard document is drafted and enters review

ai.draft.generatedAn AI feature produces a draft for human review

export.completedA requested export is ready for download

{ "event": "case.status_changed", "ts": "2026-04-21T14:05:12Z", "tenant": "lwd", "object": { "type": "Case", "id": "CAS-2026-0418" }, "change": { "from": "in_review", "to": "investigation", "actor": "usr_reyes_j" }, "audit_ref": "AUD-2026-117761" }

REF-C4 Audit export & SIEM

The audit log streams natively to Splunk (HEC), Microsoft Sentinel, Datadog, and Sumo Logic, or as NDJSON to an S3 bucket you control. Configure in Settings → Integrations → SIEM. Every entry carries the hash chain, so downstream systems can verify continuity independently of OnePointe.

FieldMeaning

id · tsStable identifier and UTC timestamp

actorPerson or system, with permission level; AI actions carry on_behalf_of

actionNamespaced verb: case.viewed, evidence.linked, ai.draft.generated, export.completed

objectType and identifier of the record acted on, with its case reference

prev_hash · hashChain commitment: each entry commits to its predecessor

Chain verification tooling ships with the export: a single command replays a range and confirms no entry was altered, inserted, or removed. This is the property the marketing site summarizes as append-only, cryptographically chained, replicated across regions.

Evaluating OnePointe? The security packet contains the documentation a CIO review needs, and the walkthrough includes a live look at every surface above. For anything specific, write to hello@onepointe.ai.

CompanyIn affiliation with Fractional Coordinator

Case management you can stand behind.

OnePointe builds software for the institutions that handle civil-rights, conduct, and safety cases - work that cannot fail quietly. We build it from inside the practitioner's chair, not from across a sales table.

Join us →See the platform →

Our purpose

We give the people who handle the hardest cases at a school or campus a system worthy of the work: one front door for every report, one case file, and one defensible record - so that no case fails quietly.

We build from the chair

Our founder held the coordinator and dean seats for more than a decade. The product is designed by people who have sat across from a complainant and read a hearing officer's draft at midnight - not by people who have only read about it.

The record is the product

Every screen exists to make the file defensible and the access auditable. Who saw what, when, and why is answered by an append-only trail, not reconstructed after the fact.

Intelligence that assists

The AI drafts, flags, summarizes, and suggests. Decisions stay with named humans, on the record.

One piece of the system

OnePointe works alongside your registrar, your counsel, and your existing process. We integrate with the systems your institution already relies on rather than asking you to abandon them.

What we hold

The decisions we made on principle, and will keep.

The AI will not decide.

It drafts, flags, summarizes, and suggests. It never assigns credibility, recommends an outcome, or finalizes a record without a named human reviewing every consequential step. The audit trail says who. Always.

We will not train on your data.

Not for other institutions, not for partners, not for marketing. The models that power OnePointe are evaluated on synthetic and licensed data. Your cases stay your cases.

Pricing stays in the open.

Per student, per year, published. Founding-partner pricing locked for the life of the relationship. No hidden fees, no surprise renewals, no charges for asking a question.

US-hosted, single-tenant.

Two regions, tenant isolation at the database layer, customer-managed keys available. We do not subprocess Customer Data to non-US infrastructure.

The front door comes first.

The person reaching the intake form may be having the worst week of their year. We hold that screen to the highest accessibility bar we apply, because the calmer that door is, the better the rest of the case goes.

We hire slowly, on purpose.

A small team, built deliberately, that answers every message itself. Several of our roles are reserved for people who have held the coordinator or investigator seat inside an institution.

Leadership

A small team, built deliberately.

Albert Roberson, LL.B., LL.M.

Founder & Chief Executive Officer

Albert spent more than a decade as a Title IX coordinator and dean of students, working civil-rights cases inside higher education and PK-12 before building the system he wished he had had. He holds LL.B. and LL.M. degrees and writes OnePointe's production code himself.

Abdul Ahad Qureshi

Chief Technology Officer

Abdul leads OnePointe's engineering and platform architecture - the append-only audit trail, the tenant-isolation model, and the AI layer that drafts without deciding. He owns how the platform is built, scaled, and secured.

Alex Roberson

Director of Sales

Alex leads go-to-market and institutional partnerships, working alongside coordinators, CIOs, and general counsel from the first conversation through deployment - with the same peer-to-peer approach that defines the company.

The bench we are building

We are actively filling these roles - several deliberately reserved for people who have held the coordinator or investigator seat inside an institution.

Practitioner-in-Residence · Compliance Founding Implementation Engineer Security Engineer Field Engineer · PK-12

See open roles →

Governance

OnePointe Technologies is affiliated with Fractional Coordinator, Inc., the civil-rights compliance firm that recommends and deploys OnePointe as its case management system.

Legal entityOnePointe Technologies

IncorporationDelaware C-corporation

HeadquartersOregon Square, Portland, Oregon

Founded2026

AffiliationFractional Coordinator, Inc.

HostingUnited States · single-tenant

General inquiries: hello@onepointe.ai · Press: press@onepointe.ai · Fractional Coordinator

Work with us

Want to help us build the future of this work?

See the platform with a former coordinator or dean of students - or, if you want to build it with us, look at the roles we are hiring for.

Book a walkthrough Join us ▸

CareersPortland, Oregon · Remote US

We hire slowly, on purpose.

OnePointe is a small team building deliberately, headquartered at Oregon Square in Portland. Every role below is open now. Resumes are optional: work samples and references from people you have actually shipped with carry the day.

5 open rolesHQ · Portland, OREngineering · remote US, quarterly Portland weeks

Mission

Give the people who handle civil-rights and safety cases a system worthy of the work - one front door, one record, one defensible trail - so that no case fails quietly.

Vision

A future where every report at every institution is met with care, consistency, and a record that holds up to anyone who asks.

Objectives

Make the defensible way the easy way for every coordinator.
Keep AI advisory - it drafts, it never decides.
Earn trust in the open: published pricing, a public changelog, real audit trails.

Life on the team

We work out of WeWork at Oregon Square in Portland, with WeWork access for the remote team nationwide. The environment is part of the offer:

☕Unlimited kombucha on tapand good coffee, always

🧘Weekly yogaon the calendar, on us

🍽Team lunchestogether, regularly

🏢WeWork everywherePortland HQ + nationwide access

💓Full health, dental & visioncovered for you

📈Meaningful equityyou own a piece of it

🌴Genuine PTOrest that is actually taken

📚Learning budgetconferences, courses, books

✈Quarterly Portland weeksthe whole team, in person

Open roles

No open positions at this time.

We are not actively hiring right now, but we grow deliberately and that changes. If you believe in this work and want to be considered when a role opens, we would still like to hear from you.

Introduce yourself →

How we hire

Any take-home work is kept short and scoped. Engineering is full-remote with quarterly in-person weeks in Portland; our administrative staff work in person at our Oregon Square headquarters.

If your role is not listed

Write to careers@onepointe.ai with a paragraph about what you would want to build here. We answer every message ourselves.

Resource libraryField notes & practitioner writing

Writing for the people doing the work.

Field notes from coordinators and deans, regulatory briefs, practice templates, and the trust documents your CIO will ask for. The full library opens publicly in Q3 2026; several pieces are available today.

Featured · Practitioner's guide

Evaluating case management platforms.

The criteria that matter, the questions to put to any vendor, and how to score the answers. Written for the coordinator building the procurement file, not the vendor selling into it.

GUIDE-01 · In preparation · publishing with the library

Get notified at launch

Trust Updated June 2026The security packet Nine documents for your CIO's review: SOC 2 Type II, pen test summary, FERPA addendum, DPA, DR plan, subprocessors, VPAT, IR plan. Available nowRequest → Trust May 2026WCAG 2.1 AA conformance summary The public accessibility statement: what was audited, what conforms, and the remediation roadmap for what does not yet. Available nowRead → Product June 2026Platform documentation Architecture, the data model, permissions, the AI layer built on Claude, and the full developer surface: API, webhooks, SIEM. Available nowOpen → Product Updated weeklyRelease changelog Every release, every security-relevant change, every deprecation. Written for the people who own the audit when it arrives. Available nowRead → Letter June 2026Notes from our CEO On why OnePointe exists, what it will and will not do, and what the year ahead holds. Written by someone who held the job. Available nowRead → Live session Booking nowA walkthrough with a peer Thirty minutes with a former Title IX coordinator or dean of students. Bring sanitized scenarios; we model them live. OngoingBook →

Field note Coming Q3 2026The first 72 hours The intake decisions that quietly decide the case, and how to make them the same way every time. In preparationQ3 2026

Field note Coming Q3 2026One record Why unified case files survive OCR review, and fragmented ones do not. With the reassembly math that proves it. In preparationQ3 2026

Field note Coming Q3 2026The calm front door Designing intake for the worst week of someone's semester: one question, a quick exit, and nothing that reads like a form. In preparationQ3 2026

Regulatory brief Coming Q3 2026What changed, operationally A running series on rule changes and enforcement shifts, focused on what a coordinator must do differently on Monday. In preparationSeries · Q3 2026

Template Coming Q3 2026Notice language that holds up Notices of investigation, outcome letters, and interim-measure language drafted to survive review by the people who ask hard questions. In preparationQ3 2026

Template Coming Q3 2026Chronology formats & hearing checklists The document structures a defensible case file is built from, in formats your team can adopt tomorrow. In preparationQ3 2026

If you would like to write for the library, or to be notified when it launches, write to hello@onepointe.ai. We answer every message ourselves.

Who we serve

Government & public agencies.

One system for the public bodies that investigate civil-rights, discrimination, and conduct complaints - and have to show their work. The obligations differ from a campus. The standard does not: one case file, one audit trail, one defensible record for every matter.

civil-rights and workplace frameworks on one record - Title VI, Title VII, ADA, EEO, public conduct, and grievance

case file, one audit trail, one dashboard - from complaint to resolution, defensible under public scrutiny

hosted and single-tenant, never trained on your data - built for records that face open-records and oversight review

Find your fit

Built for the public sector. Tailored to each.

Three common settings - configured to the obligations you actually carry.

State & regional agencies

Departments & authorities

Civil-rights, human-services, and licensing bodies that take complaints from the public and from staff, with reporting that rolls up across programs.

County & municipal government

Local government & HR

One front door for resident and employee complaints across departments, with a defensible trail a council or commission can review.

Public authorities & special districts

Transit, housing, health & utilities

Federal-funding recipients managing Title VI and grievance obligations, with per-program configuration under one shared record.

Book a walkthrough Explore by role ▸

What public agencies ask us first

Public records. An append-only audit trail and record handling built for open-records requests, retention schedules, and oversight review.

Title VI & federal funding. Complaint intake and grievance procedures aligned to Title VI obligations for recipients of federal financial assistance.

Workforce & EEO. Title VII and ADA workplace investigations for public employers, on the same record as public-facing complaints - who did what, and when.

Our approach

We stand it up with you - we do not hand you a login.

We build from the chair

Designed by former coordinators and investigators, not vendors. We start from how a matter actually moves through your organization.

One record, end to end

Every report enters the same way, lives in one case file, and leaves an append-only audit trail. Answered, not reconstructed.

Intelligence that assists

The AI drafts, flags, and summarizes. It never assigns credibility or finalizes a record without a named human on every step.

Configured, migrated, supported

We shape it to your obligations, bring your open matters across, and go live with a practitioner reachable directly.

Insights & resources

Writing for the field, from the field.

Newsletter

The Gazette

Practitioner writing and product notes on civil-rights compliance, casework, and the record. No marketing.

Read the newsroom →Library

Guides & playbooks

Framework guides, implementation checklists, and templates for investigators, coordinators, and compliance offices.

Browse resources →Trust

Security & the record

How the audit trail, tenant isolation, and no-training-on-your-data commitments actually work.

See security →

Ready to talk?

Walk through your workflow.

Thirty minutes with a former investigator or coordinator, run on your own sanitized scenarios - public-facing or workforce.

Book a walkthrough Talk to sales ▸

Who we serve

Employers & organizations.

One system for the organizations that run workplace investigations and conduct matters outside education - and need a record that holds up. The setting differs. The standard does not: one case file, one audit trail, one defensible record from intake to close.

workplace and conduct frameworks on one record - Title VII, harassment & discrimination, ADA, ethics, retaliation, and grievance

case file, one audit trail, one dashboard - from report to resolution, defensible under legal review

hosted and single-tenant, never trained on your data - built for matters that may reach counsel or a regulator

Find your fit

Built for the workplace. Tailored to each.

Three common settings - configured to the obligations you actually carry.

Employers & HR teams

Workplace investigations

Harassment, discrimination, and retaliation matters handled on one record, with interview workflows and a trail your counsel can stand behind.

Nonprofits & member organizations

Conduct & grievance

Member conduct, volunteer safety, and grievance processes with a calm front door and a defensible record - sized to lean teams.

Regulated & safety-sensitive sectors

Healthcare, finance & beyond

Ethics, whistleblower, and conduct casework with the isolation, retention, and audit standards regulated environments require.

Book a walkthrough Explore by role ▸

What organizations ask us first

Workplace investigations. Intake, evidence handling, calibrated interview questions, and a report drafted from the record - the finding stays with a named investigator.

Counsel-ready records. An append-only audit trail and chain of custody built to withstand review by the people who ask hard questions.

Confidentiality & access. Tenant isolation, customer-managed keys, and role-based access - your matters stay yours, and we never train on them.

Our approach

We stand it up with you - we do not hand you a login.

We build from the chair

Designed by former coordinators and investigators, not vendors. We start from how a matter actually moves through your organization.

One record, end to end

Every report enters the same way, lives in one case file, and leaves an append-only audit trail. Answered, not reconstructed.

Intelligence that assists

The AI drafts, flags, and summarizes. It never assigns credibility or finalizes a record without a named human on every step.

Configured, migrated, supported

We shape it to your obligations, bring your open matters across, and go live with a practitioner reachable directly.

Insights & resources

Writing for the field, from the field.

Newsletter

The Gazette

Practitioner writing and product notes on civil-rights compliance, casework, and the record. No marketing.

Read the newsroom →Library

Guides & playbooks

Framework guides, implementation checklists, and templates for investigators, coordinators, and compliance offices.

Browse resources →Trust

Security & the record

How the audit trail, tenant isolation, and no-training-on-your-data commitments actually work.

See security →

Ready to talk?

Walk through your workflow.

Thirty minutes with a former investigator, run on your own sanitized scenarios - whatever your setting.

Book a walkthrough Talk to sales ▸

Who we serve

Higher education & PK-12.

One system for the people who handle civil-rights, conduct, and safety cases - on campus and in the district. The workflows differ. The standard does not: one case file, one audit trail, one dashboard.

civil-rights and conduct frameworks on one record - Title IX, Title VI, Title VII, Conduct, ADA / 504, BIT / CARE

case file, one audit trail, one dashboard - from intake to resolution, defensible at every step

hosted and single-tenant, and never trained on your data - the same standard for every institution

Find your fit

Built for both. Tailored to each.

Choose your setting to see how OnePointe works where you are.

Higher education

A civil rights case rarely stays in one office. OnePointe runs each framework as its own module over one shared case file, so a matter moves between conduct, Title IX, BIT, and general counsel without ever leaving the record.

Universities & colleges

Four-year, public & private

The full framework set, hearing management, cross-office coordination, and Clery-aware reporting. Built for a Vice President's morning.

Community colleges

Two-year & technical

Sized for institutions where the same person wears five hats. Pricing scales to enrollment; no dedicated case manager required.

Systems & consortia

Multi-campus & state systems

Per-campus configuration under system-level reporting, with the isolation a shared-services model requires.

From the field · higher education

“For the first time, conduct, Title IX, and BIT are looking at the same case file.”

- Dean of Students · four-year public university

Book a walkthrough Explore by role ▸

What higher ed asks us first

Clery and FERPA. De-identified pattern reporting, education-record handling, and retention rules configured to your obligations.

Hearings. Advisor access, evidence exchange, and a defensible record of every step from notice through determination and appeal.

Coordination. One case file across Title IX, conduct, BIT, and CARE - and the audit trail says who did what, and when.

Our approach · both settings

We stand it up with you - we do not hand you a login.

We build from the chair

Designed by former coordinators and deans, not vendors. We start from how a matter actually moves through your institution.

One record, end to end

Every report enters the same way, lives in one case file, and leaves an append-only audit trail. Answered, not reconstructed.

Intelligence that assists

The AI drafts, flags, and summarizes. It never assigns credibility or finalizes a record without a named human on every step.

Configured, migrated, supported

We shape it to your obligations, bring your open matters across, and go live with a practitioner reachable directly.

Insights & resources

Writing for the field, from the field.

Newsletter

The Gazette

Practitioner writing and product notes on civil-rights compliance, casework, and the record. No marketing.

Read the newsroom → Library

Guides & playbooks

Framework guides, implementation checklists, and templates for coordinators, deans, and district offices.

Browse resources → Trust

Security & the record

How the audit trail, tenant isolation, and no-training-on-your-data commitments actually work.

See security →

Ready to talk?

Walk through your workflow.

Thirty minutes with a former coordinator, dean, or district practitioner, run on your own sanitized scenarios - higher ed or PK-12.

Book a walkthrough Talk to sales ▸

CustomersBy role

One platform. Many seats.

A civil rights case touches a lot of people - across institutions and organizations, and on both sides of the matter. Everyone who touches a case gets a view sized to their work and a permission boundary that matches their responsibility. Least privilege by default, and every access on the record.

Run the case → Support the people → Hold the record → Lead the institution → The people it's about →

01 Run the case

The people who move a matter from intake to resolution and produce the record.

Title IX / Civil Rights CoordinatorBoth

Run intake, assign investigators, manage hearings, and produce the record. The platform tours your morning the way you would: open queue, then schedule, then anything overdue.

How OnePointe supports this roleOnePointe gives the coordinator one queue across every framework, auto-assigns investigators by conflict and caseload, and tracks each regulatory clock. It drafts notices and outcome letters from the case file, flags a deadline before it slips, schedules follow-up email to the parties at each step, and produces the complete record on demand.

Deputy Coordinator / InvestigatorBoth

Conduct interviews, link evidence, and draft findings - scoped to the matters assigned to you, with drafted questions to review before any meeting.

How OnePointe supports this roleThe investigation workspace holds interviews, evidence, and a working findings draft in one place. OnePointe links every exhibit to the allegation it supports, transcribes and summarizes interviews, drafts the findings for the investigator to edit rather than accept, and schedules the next interview with reminders sent automatically.

Dean of StudentsHigher ed

Coordinate across conduct, Title IX, BIT, and CARE without switching tools. One case file, one trail, every module on one dashboard.

How OnePointe supports this roleOne dashboard spans conduct, Title IX, BIT, and CARE, so the dean sees every open matter without switching tools. OnePointe surfaces what is overdue, routes each referral to the right office in real time, schedules the meetings that follow, and rolls individual cases up to a weekly briefing.

Director of Student ConductHigher ed

Run conduct cases with the same defensible record as Title IX. Same audit trail, same export, same standard.

How OnePointe supports this roleConduct cases run on the same defensible record as Title IX, with the same audit trail, templates, and deadlines. OnePointe schedules hearings, sends notice and reminder email to every party, assembles the hearing packet, and captures the decision and its rationale on the record.

Hearing Officer / Decision-makerBoth

Time-boxed access to exactly the record needed to decide, and nothing more - with every view logged.

How OnePointe supports this roleOnePointe grants time-boxed access to exactly the record needed to decide, and nothing else. It presents the evidence in a clean reader, captures the rationale as the decision is written, closes access the moment it is filed, and logs every view along the way.

Behavior / Discipline LeadPK-12

Run discipline and civil-rights matters through restorative and formal paths, with the record to show what was offered and done.

How OnePointe supports this roleRestorative and formal tracks run side by side with the civil-rights lens built in. OnePointe flags when a discipline matter may also be a Title VI or 504 issue, schedules re-entry and family meetings with follow-up email, and keeps every step defensible without added runtime.

02 Support the people

The people who care for those involved and follow through on supportive measures.

BIT / CARE / Threat Assessment ChairBoth

A care-team view designed for the work, with de-identified reporting that protects student privacy while supporting the team's mandate.

How OnePointe supports this roleFor a BIT, CARE, or threat-assessment team, OnePointe provides a shared care-team space where every report, meeting note, risk level, and action item lives together. It does this by structuring each meeting around a repeatable rubric with de-identified reporting, and it runs with no delay: notes and risk levels update in real time. The system schedules follow-up email to the parties, sets review dates, and surfaces rising patterns across cases so a growing concern is never missed.

Case Manager / AdvocateBoth

Track supportive measures and follow-through, documented, so nothing offered quietly disappears.

How OnePointe supports this roleSupportive measures and follow-through are tracked to completion. OnePointe schedules each check-in, sends follow-up email to the parties on a cadence you set, and documents every measure offered and delivered so nothing quietly falls off.

Counselor / Social WorkerBoth

A support role with privacy boundaries that fit - visible where it helps, walled where it must be.

How OnePointe supports this roleA support role with privacy boundaries that fit: visible where the student needs help, walled off from the investigative file. OnePointe logs supportive contact without exposing case detail and flags an urgent concern to the care team the moment it is entered.

Advisor / Support personBoth

Scoped access to participate in a matter without seeing the whole file.

How OnePointe supports this roleScoped access to participate in a matter without seeing the whole file. OnePointe shares only the documents the advisor is entitled to, on the timeline the coordinator controls, and records every view on the audit trail.

03 Hold the record

The people who make sure the file is defensible, compliant, and secure.

General CounselBoth

Privileged communications, legal hold, retention overrides, and the kind of audit log that holds up in front of the people who ask hard questions.

How OnePointe supports this rolePrivileged communications, legal holds, and retention overrides live in one governed system. OnePointe segregates privileged material, freezes records under hold, and produces a complete, timestamped chain of custody ready for litigation.

Compliance / Clery OfficerHigher ed

Obligations tracked, reporting produced, and evidence of a consistent process - without a spreadsheet in sight.

How OnePointe supports this roleObligations are tracked and reporting is produced from the same data the front line uses. OnePointe maps incidents to Clery categories, generates the annual report, and evidences a consistent, defensible process end to end.

ADA / Section 504 CoordinatorBoth

Accommodation and access cases handled with the same defensible record as every other framework.

How OnePointe supports this roleAccommodation and access cases carry the same defensible record as every other matter. OnePointe tracks each interactive-process step, schedules follow-up email with the requester, and documents every decision and the reason behind it.

Human ResourcesBoth

Title VII and employee matters, kept separate from student records with their own access boundary.

How OnePointe supports this roleTitle VII and employee matters stay separate from student records, with their own permissions and retention. OnePointe drafts investigation summaries, schedules interviews with automatic reminders, and holds the employee file to its own rules.

IT / Information SecurityBoth

SAML / OIDC, SCIM, SIEM export, immutable audit, single-tenant isolation, customer-managed keys. The packet your CIO needs lives at request the security packet.

How OnePointe supports this roleOnePointe runs single-tenant and SSO-gated, encrypted in transit and at rest, with every action logged. IT provisions and de-provisions by role, reviews the access log, and never needs to see case content to keep the system secure.

04 Lead the institution

The people who need the pattern and the briefing without becoming daily operators.

VP Student Affairs / ProvostHigher ed

Institution-level reporting and trend analysis, with the briefing materials a senior leader needs.

How OnePointe supports this roleInstitution-level reporting and trend analysis, with the briefing already written. OnePointe rolls every office into one view, shows where volume and risk are rising, and drafts the leadership summary for review.

Chief of StaffBoth

The one-page answer - trends, overdue items, and what leadership needs to know this week.

How OnePointe supports this roleThe one-page answer, trends, overdue items, and what leadership needs to know, generated on demand. OnePointe assembles the brief, flags anything past deadline, and keeps the narrative consistent across cabinet.

Superintendent's OfficePK-12

A district-wide view across every building, so the office can answer “what happened, and what did we do.”

How OnePointe supports this roleA district-wide view across every building, so the office can answer the board and the state with confidence. OnePointe aggregates each school's record, standardizes reporting, and flags the buildings that need attention.

Principal / Assistant PrincipalPK-12

The building's dashboard for the day, rolled up to the district record automatically.

How OnePointe supports this roleThe building's dashboard for the day, rolled up to the district record automatically. OnePointe shows today's incidents, schedules parent and re-entry meetings with follow-up email, and keeps discipline defensible.

05 The people a case is about

Not only staff. The front door is built for the people on the other side of the matter - often on the worst week of their year.

ReporterBoth

A calm front door from any device, one question at a time, with an emergency path surfaced on every screen and a quick exit when it's needed.

How OnePointe supports this roleA calm front door from any device, one question at a time, with an emergency off-ramp. OnePointe accepts a report named or anonymous, routes it to the right office instantly, and confirms receipt.

ComplainantBoth

Status by secure code, supportive measures, and a process explained in plain language rather than assumed.

How OnePointe supports this roleStatus by secure code, supportive measures, and a process explained in plain language. OnePointe updates the complainant at each step, offers measures without a login, and keeps them informed by scheduled email.

RespondentBoth

Notice, the case to answer, and a fair, documented process - the record protects everyone, not only the institution.

How OnePointe supports this roleNotice, the case to answer, and a fair, documented process, with the same record on both sides. OnePointe delivers notice, shares the evidence they are entitled to, and tracks every deadline for the response.

Parent / GuardianPK-12

File and check status on behalf of a student, in language a family can actually use.

How OnePointe supports this roleFile and check status on behalf of a student, in language a family can follow. OnePointe accepts a report from a parent, confirms it, and shares status updates by secure code.

See your seat

Walk through your view.

Tell us your role and we will show you the exact screen you would live in - run by a former practitioner who has sat in it.

Book a walkthrough By segment ▸

LetterFrom the founder

I spent eleven years doing this work before I built the software for it. I sat across from people on the worst day of their year and asked them to trust a process. What I did not have was a system worthy of that trust. The case lived in four places. The record was a folder of spreadsheets and a thread of emails. When the audit arrived, and it always arrived, the work was sound but the trail was not.

OnePointe exists to close that gap. One front door for every report. One case file. One audit trail that writes itself down as the work happens, cited to the record. Title IX, Title VI, conduct, accessibility, and behavioral intervention run on the same standard, because the standard does not change when the statute does.

There is a line this company will not cross. The software drafts, flags, and summarizes. It never decides. A determination belongs to a trained human being who is accountable for it, and it will stay there. An automated system that quietly makes the call is not a convenience. It is a liability wearing the costume of one. We build tools that make the practitioner faster and the record cleaner, and then we step back.

We also believe pricing should be something you can read. Our numbers are published. Our contracts are short. An institution should not need three sales calls to learn what a thing costs. Trust is not a slogan here. It is operationalized, in the product and in the terms.

On the year ahead, we are adding depth rather than surface. More of the frameworks institutions cannot afford to mishandle. Better intelligence on the same clean record. And the same promise, unchanged, that your data is yours, exportable in full, on the day you ask for it.

I built this for the person I used to be, working late, holding a case that mattered, wishing the system underneath the work was as careful as the work itself. What you are given, you give forward. This is one way I know how to do that.

Albert Roberson
Founder & CEO, OnePointe

Questions about anything here? Write to hello@onepointe.ai. We read and answer every message ourselves.

Page not foundError 404

This page could not be found.

The link may be out of date, or the address may have a typo. Nothing is broken on your end. Here are the places people usually mean to go.

Back to home Book a walkthrough

SecurityInfrastructure, hosting, and data handling. Who it is forInstitutions and organizations we serve. ResourcesDocumentation, guides, and downloads. ContactReach a person, not a queue.