The Next-Generation Productivity Suite

OneOffice brings together all the tools companies need in one easy-to-use application.

Secure. Simple. Cost-Effective.

Get Started

Learn More

COMPLETE SERVICE OFFERING

OneOffice comes with all the applications your organization needs
No third-party licenses ever again.

… no more integrations, single signon, upgrades, patches, new servers etc.

ERP

DOCUMENTS

STORAGE

CALL & CHATS

EMAILS & CALENDARS

SECURITY FIRST

How do large companies and governments secure their data? Simple, they don’t share

OneOffice was painstakingly built to put security first, by bundling all the tools you need on your own server on Huawei Cloud. Once exclusive to large IT teams, OneOffice is now making security and privacy accessible to all!

Isolation. Encryption. Server-side editing.

FOR MOBILE-TEAMS

OneOffice is a full suite with built-in video calls, editors, collaboration, emails, calendars, chats, projects etc.

Our mobile apps were specifically designed to make sure you don’t miss a beat!

COLLABORATION

Collaboration & teamwork are integrated in … everything!

Attach documents in chats & calls, link tasks automatically to your calendar, securely share with customers …

Comment on anything and get notified as soon as someone mentions @you so you are always in the know!

HYBRID CLOUD

For mission-critical applications local mirror servers achieve zero down-time

All your data is sync-ed real-time, including documents, metadata, chats, calendars etc.

Catapult your digital office!

It’s only 10mins away.

View Pricing

Get Started

EXCLUSIVE FEATURES

OneOffice is the secure solution to manage your work

Share your files, work with documents and get notified when work gets done

Edit your documents right in your browser

Edit and collaborate on your Word, Excel, PPT and Visio docs live!

Secure Video / Audio Calls

Call your colleagues or teams securely on their PC or smartphones

Secure Emails

State of the art Email service with cyberprotection built-in

Email, Calendar and Contacts

All your groupware apps working seamlessly to make you more productive

Start your day on the right foot

See your whole day at a glance, upcoming deadlines and any important notifications!

The smartest yet easiest ERP on the planet!

Streamline your operations, accounting, HR, sales etc. and everything in between

SECURITY FEATURES

Single Point of Entry
OneOffice includes its own web server with SSL termination

The application acts as a firewall, preventing unauthorized access

All services (DB, Redis, storage, document editor etc.) sit BEHIND the application server in a private network

Strong session controls at the access-level that prevent any further actions until user permissions are validated
Intrusion Detection
Host Intrusion Detection We monitor all activities to detect anomalies in user behavior and block malicious attempts system-wide

Protocol-Based Intrusion Detection HTTP / HTTPS / IMAP / SMTP / Websocket servers are built-in and disconnect on any attempts to alter protocol behavior. We do not honor SSL requests from older encryption technologies

Anomaly-Based Intrusion Detection The typical patterns of behavior are well-known in advance. Any deviation is given a score, above which attempt is logged and the session is terminated
Intrusion Prevention
Strong Session Controls Each user’s session is linked to device / IP and cannot be hacked by third party

XSS – Cross-site Scripting By design, our system is not vulnerable, as our applications are Websocket / REST – based which only query data (no HTML generation)

SQL Injection Our queries are prepared & compiled during startup time preventing any attempt to alter or access the database

Password Flood Controls All access protocols (HTTPS / IMAP / SMTP) share ‘flooding’ database system-wide.

Live list of Malicious IP / Domains We download from multiple services the most up to date lists of malicious actors

Malware / Viruses User apps never run on server, all uploads are scanned. Our code is compiled on safe clean machines

Long hashes & high entropy We use long alphanumeric random strings with very high entropy, negating “birthday attacks”
Separate Instance
Each organization gets its own instance of OneOffice

Separate database

Separate file storage

Talk chats & video calls routed through your server

All notifications through your instance

Customized security rules (e.g. password length, MFA etc.)

Each customer has a different Web SSL certificate

MS 365 & Google Workspace use shared database & file storage. A vulnerability / hack exposes all its tenants to attacks.
End-to-end Encryption
End-to-end (E2E) encryption (e.g. WhatsApp, Signal) is the most secure encryption, secret keys on your device, not on server.

All Talk chats

All Talk audio / video calls

All web & push notifications

MS Teams & Google Meet are NOT E2E encrypted, exposing your calls to server administrators & malicious actors
Ransomware / Data-loss Protection
All servers are protected by strong key-based & IP authentication

HuaweiCloud provides additional strong protections and MFA

Historical versions of all files are kept as backup, so you can quickly revert any data loss

Built-in auditing tools allow you to track unauthorized access

Fine-tuned sharing rules

Only the highest-end MS 365 package comes with some auditing tools (but no file versioning!)
Strong Sharing Protection
Internal and External shares controlled by administrators

Admins can fine-tune external share rules (e.g. password protection, duration, groups, access type, target audience etc.)

Automated video call for verification during file access

Multiple shares for same files with different permissions

Version history is kept for all changes (even by external actors)

MS 365 and Google Workspace do not allow you to customize your sharing rules or to have multiple share permissions for the same file
Server-side File Editing
Online document (Word, PPT, Excel, Visio) editor is server-side

Streaming engine sends a “view” of the file, not its content

Uses same technology as streaming games

Blocks all downloads

Real-time collaboration is server-controlled avoiding conflicts

MS 365 and Google Docs send the file to your browser for editing, allowing users to get a copy (even if you disable downloads)
Security Controls
All communication is encrypted

Enforced password policy (length, history, life-cycle, login attempts, common passwords, checking for breached passwords etc.)

Brute-force protection

Rate-limiting

Content Security Policy (block XSS etc.)

Same-site cookies only

Machine-learning suspicious login detection

IP blocks / whitelists (e.g. only allow access from company IP)

Multi-factor authentication (OneOffice Auth or any secure MFA App)
Activity & Event Logs
All user activity are logged

Your / employee file shares

All file modifications

All communication between your employees & externally

New or deleted files

Download of files

New comments or tags

Calendar invitations

Incoming calls or chat requests
Email Security
DKIM / ARC signatures

Spam / Phishing detection using leading-edge AI filters

Email quarantine system

Industry IP block lists

Anti-virus using most advanced commercial virus signatures

Ability to block by domain / IP

Executable (.exe / .pkg) blocking

Malicious HTML filtering

In-page JavaScript removal

Macro-scanning in MS-Office documents