Product updates & communications · Read the changelog →
nePointe®

Case Management / AI-powered / Built for operational compliance

Sensitive cases, handled with the care they deserve.

OnePointe is a case management platform for the teams that handle civil-rights, conduct, and workplace investigations. The AI drafts, flags, and summarizes. It never decides. A named person does, on the record. Purpose-built for the institutions and organizations that take this work seriously.

Book a walkthrough Explore the platform ▸
Hash-chained · audit trail WCAG 2.1 AA · built and tested US-hosted · tenant-isolated
Audit trailCAS-2026-0418
Logged
append-only · cryptographically chained · replicated
Public intakeone front door
What would you like to do?
›File a reportencrypted
›Check a report statussecure code
!Emergency: 911 + safety resources
quick exit · keyboard-first · screen-reader complete
Case fileCAS-2026-0418
Parties0 linked
Unified timeline0 events
Evidence0 items
ModuleTitle IX
one record · thirteen standing sections
The IntelligenceYour AI

It drafts. It flags. It summarizes.
It never decides. You do.

reconstructing chronology from 41 sources✓ 11 milestones · fully editable
advisory only · every invocation logged
Investigationchronology
04/18 09:12 Report received · logged
04/18 11:40 Complainant interview · notes filed
04/21 14:05 Evidence linked · 6 items
04/24 10:00 Questions drafted · investigator review
source-aware timestamps · chain of custody
Case density mapde-identified
density by building · no individuals shown
Scheduletoday · 5 events
10:00Complainant intake interviewCASE-0471
2:00Pre-hearing conferenceCASE-0470
4:00Witness check-inCASE-0466
5:00CSA report submission dueDEADLINE
case context on every event
The platform

One front door. One record. One defensible trail.

Every report enters the same way, lives in one case file, and leaves a record that holds up to anyone who asks. The capabilities below ship today across all environments.

Public intake

A calm front door for a hard week.

The public-facing intake opens with one question, what would you like to do, and routes to the right form or a status check from there. Built around the people who actually use it: reporters, staff, and the parties involved.

  • File a report or check status from a single landing page
  • Emergency and safety resources surfaced prominently on every page
  • Quick-exit button for reporters who need to leave fast
  • End-to-end encrypted, keyboard-first, full screen-reader support
public intake
What would you like to do?
›File a reportencrypted
›Check a report statussecure code
!Emergency: 911 + safety resources

Case file + timeline

One record. The whole story.

Parties, evidence, communications, and decisions held in a single case file with a unified timeline. Title IX, Title VI, and Conduct cases all flow through the same dashboard, so nothing fragments across tools.

CAS-2026-0418
Parties0 linked
Unified timeline0 events
Evidence0 items
ModuleTitle IX

Investigation

Evidence, interviews, and the report that follows.

A workspace for evidence handling and interview notes, with chronological evidence linking and source-aware timestamps. Investigators can generate calibrated interview questions from the case file, then review and adjust before any meeting. The AI never asks the question itself.

When the record is ready, the platform assembles a draft investigation report from the material already in the case file - meeting notes, evidence files, and party and witness statements - organized into a standard structure with every assertion cited back to its source. It is a first draft the investigator edits, verifies, and signs. The system drafts the report. It never reaches the finding.

  • Report drafted from meeting notes, evidence files, and recorded statements in the case
  • Standard sections: allegations, procedural history, evidence summary, and analysis scaffold
  • Every drafted line cites the case record it was built from
  • Held as an editable draft until an investigator finalizes it - findings are always human
investigation chronology
04/18 09:12 Report received · logged
04/18 11:40 Complainant interview · notes filed
04/21 14:05 Evidence linked · 6 items
04/24 10:00 Questions drafted · investigator review
04/29 15:20 Investigation report drafted · investigator review

Audit trail

Defensible at every step.

Every action, edit, and access logged automatically, in order, without anyone remembering to. Each entry commits to the hash of the one before it, so a verifier can walk the chain and show whether anything was altered. This is the record that lets your team sleep at night.

immutable log

Reports · geographic intelligence

Patterns, without exposing people.

The Reports module surfaces case density and trend hotspots across buildings, sites, and locations. De-identified by default, with aggregation thresholds configurable per organization to prevent re-identification of small populations.

case density map
ElevatedModerateLowAggregated · no individuals shown
De-identified clusteringby building · time-of-day

The intelligence

It drafts. It flags. It summarizes.
It never decides. You do.

OnePointe introduced AI to support professionals, not replace institutional judgment. It drafts the notices, reconstructs the timeline, and summarizes the long file. Every suggestion is advisory, editable, and logged in the audit trail beside the decision a person actually made.

The AI is yours, not ours. OnePointe does not provide, resell, or contract for AI. Your institution connects the system it already runs and already holds an agreement for: Anthropic's Claude, OpenAI's GPT, Google's Gemini, or xAI's Grok, reached directly or through Microsoft Azure OpenAI, AWS Bedrock, or Google Vertex AI. You choose the system, you hold the agreement, and you can change it or switch it off without asking us.

Timeline reconstruction

Structured chronology, from the record.

Generates structured timelines from case records, emails, interview summaries, and uploaded documents, surfacing sequence gaps, delayed response points, overlapping reports, and policy-relevant milestones across every module.

reconstructing chronology from 41 sources✓ 11 milestones · fully editable

Interview questions

Calibrated questions, drafted for review.

Drafts interview questions tailored to a case's facts, with tone configurable per institution, from formal to trauma-informed. The investigator reviews and adjusts before any meeting.

drafting questions · tone: trauma-informed✓ advisory · the AI never asks the question itself

Data sovereignty

We do not train AI on your cases. Your institutional data belongs to you.

Student records, complainant information, employee matters, and investigative documentation are isolated to your tenant by row-level security in Postgres, enforced on every query by the database rather than by application code. We do not train AI models on your cases, we do not sell your data, and we do not share it with advertisers. That is not positioning. It is principle.

row-level isolation · hash-chained audit · training on case data: never

The modules

Six bodies of work. One dashboard.

OnePointe covers the civil-rights, conduct, accessibility, and behavioral work institutions cannot afford to mishandle. Every module shares the same intake, timeline, and audit trail. Here is how each runs.

›Unified by design.  Title VI flows through the same dashboard as Title IX and Conduct, and is included at no additional charge.

The problem

Three tools and a folder of spreadsheets is not a record.

The work is hard enough. The system underneath it should not be the reason a case falls apart. Whether you are running on spreadsheets or on an older platform built before AI and before civil-rights work spanned this many laws, one record beats many.

Today

A case lives in four places and someone's memory.

  • Intake by email, evidence in a shared drive
  • Deadlines tracked in a spreadsheet, or not at all
  • Each case type handled in a different system
  • When OCR asks, you reassemble the story by hand

In OnePointe

One case file. One trail. Every module, one dashboard.

  • Every report enters through one structured front door
  • Title IX, Title VI, and Conduct share one timeline
  • Every action logged automatically, in order
  • The record is already assembled when anyone asks

From the field

"We replaced three tools and a folder of spreadsheets with OnePointe. The audit trail alone changed how our team sleeps at night."

Director of Investigations · Institution

3 → 1
tools, consolidated
0%
of actions logged
0
case-type modules, one dashboard
The AI layer

How the AI works, and where it stops.

Every coordinator asks the same question about AI in a case file: who decided? With OnePointe the answer is always a person, by name, on the record. Here is the exact line the AI does not cross. There is a second question worth asking, and the answer matters just as much: whose AI is it? It is your institution's. You connect the system you already run, under the agreement you already hold.

01

The AI drafts

It reads the file and prepares the summary, the timeline, the flagged inconsistency, the first pass at a report. It does the assembly a person would otherwise do by hand.

02

A named person decides

Nothing the AI produces takes effect on its own. A coordinator or investigator reviews it, edits it, and approves it. The judgment is theirs. This is the line the system will not cross.

03

The record proves it

Every AI action and every human decision is logged in the audit trail, timestamped and attributed. Never decides is not a promise on a page. It is a record you can produce.

Security & compliance

The infrastructure under work that can't go wrong.

Independent assessments and documentation available under NDA through your account manager.

Audit trail

Hash-chained and verifiable.

Each entry’s integrity hash incorporates the previous entry’s, per tenant. A verifier function walks the chain and returns every break.

WCAG 2.1 AA

Built and tested to AA.

Third-party accessibility audit against Level AA, with a public conformance summary and remediation roadmap.

FERPA · DPA

Built for institutional data.

FERPA addendum, a Data Processing Agreement, and applicable privacy terms, provided in the security packet for your CIO.

Tenant isolation

Enforced by the database.

Row-level security is forced on every table. Each row carries its institution’s identifier and no query path returns another institution’s rows.

Resilience

Single region, continuous backup.

US-hosted in AWS us-west-2 with continuous backups and point-in-time recovery. Multi-region failover is planned and not available in pre-release.

AI data use

Never trained on your cases.

Institutional case data is never used to train models, and stays isolated within your environment.

Why trust us

We operate the way we ask you to operate.

OnePointe is new, and we built it that way on purpose. We grow deliberately, so every institution is built with, not sold to. Until the logos and the years accumulate, we earn trust the way this work demands it. In the open.

Published pricing

Every number is on the site. No quote-gating, no discovery call required to learn what it costs.

A public changelog

Every release, every security-relevant change, every deprecation. Written for the people who own the audit.

Real audit trails

The same append-only, attributed record we give your cases, we hold ourselves to. No black boxes.

Built from the chair

The person who demos OnePointe has sat in your seat. A decade of civil-rights compliance work, not a sales script.

Pricing

Pricing you can actually see.

You pay for what you turn on, and you can see every number before you talk to anyone. No bundling you into modules you will never use, and no quote-gate to find out what it costs.

A serious institutional purchase should not require three sales calls to get a number. Our pricing is published and our contracts are straightforward.

The Partner Institution Program is how you buy: begin for $2,000, prove the platform on real cases, and ramp to the published rate over a single three-year agreement.

How pricing works · one agreement, priced to ramp

You sign once, at the start - a single three-year agreement. Year one is priced to prove it, year two to grow into it, and year three settles at the published rate, locked as your founding-partner rate for the life of the relationship.

No conversion decision at month six. Only a 30-day exit if we miss our performance commitments.

Year 1 · The partner year

Prove it on real cases.

$2,000to begin

+ $250 / month · $5,000 all-in for year one

  • Implementation, data migration, SSO, and training covered by the $2,000
  • Full access to every core module; Employee Relations, Bias Response, and Clery available as add-ons
  • Dedicated success manager and quarterly reviews
  • Your records, workflows, and configuration remain yours

Year 2 · The growth year

Nothing to re-procure.

50%of the published rate

Budget already approved - no second procurement cycle

  • Everything continues under the original agreement
  • Ongoing upgrades and new module releases included
  • Dedicated success manager continues

Year 3 + · Founding-partner rate

The published rate, locked.

$1.75per student · per year

Locked as your rate for the life of the relationship

  • Renewable in 1-, 3-, or 5-year increments
  • Full data export rights at any time
  • Covers all student, faculty, and staff matters - every module
See your three-year ramp

Total enrollment · 9,800 students

Or pick a typical size:

We use student count to keep pricing simple. Faculty & staff coverage is included automatically.

Government agencies, employers, and nonprofits are priced per seat, per licensed investigator or coordinator - not per student. Ask for a quote ›

Year 1$5,000all-in · to begin
→
Year 2$8,57550% of the rate
→
Year 3 +$17,150$1.75 · locked

Core modules included. No per-seat fees. Add-ons priced in the open. No price increase mid-contract.

Get started with the Partner Institution Program ▸

As a partner institution, you commit to naming an executive sponsor, joining quarterly feedback sessions, contributing roadmap input, and providing a reference or case study at the twelve-month mark. In return, you keep a thirty-day exit if we do not meet our performance commitments, full export of your data at any time, and ninety days of transition support if the relationship ever ends.

Over 50,000 students or multi-campus?

Let’s design something specific to you.

Large universities and multi-campus systems are scoped individually. Volume pricing, dedicated deployment, customer-managed keys, SIEM and SCIM integration, and support commitments are all on the table. We will tell you plainly what is available today and what is on the roadmap before you sign anything.

Scope your deployment

Included on every plan

Implementation & data migration Staff training (live or recorded) Unlimited cases & storage U.S. hosting & encryption Quarterly product updates Add-ons priced in the open Data export at any time No price increase mid-contract
Availability

Available in any modern browser.

OnePointe runs in any modern browser on desktop, tablet, and phone. There is nothing to install. Desktop applications for macOS and Windows are planned and are not available in pre-release.

This is the command bar. In OnePointe, ⌘K on macOS or Ctrl K on Windows searches cases, policy, and people from anywhere, without leaving the keyboard.

Request a demo

See OnePointe with someone who has been in your seat.

A 30-minute walkthrough with a former coordinator, investigator, or dean. No slide deck, no SDR script, just a real look at the platform on your terms.

Book a walkthrough Become a partner institution ▸
Led by a peer, not a sales rep We model your sanitized scenarios live Leave with a security packet for your CIO
Security & infrastructure

Sensitive cases deserve quiet, hardened systems.

OnePointe is built for institutions that cannot afford to be wrong about who saw what, when, and why. Every layer of the platform exists to make the record defensible and the access auditable.

Hash-chained audit WCAG 2.1 AA FERPA school official US-hosted tenant-isolated AES-256 encrypted

Hash-chained · audit trailWCAG 2.1 AA · built and testedFERPA-aligned · BAA on request

Data protection

Every byte of Customer Data is encrypted at rest and in transit. We do not train AI models on Customer Data, we do not sell it, and we do not share it with advertisers.

Encryption in transit

TLS 1.3 for all client and service-to-service traffic. Older protocols are disabled at the edge.

Encryption at rest

AES-256 at the storage layer, managed by our infrastructure provider. Customer-managed keys are not available in pre-release.

Field-level encryption

Planned: application-layer encryption for designated sensitive fields, above the storage-layer encryption already in place. Not available in pre-release.

Access & identity

Single sign-on

Planned: SAML 2.0 and OpenID Connect, with SCIM 2.0 provisioning against your identity provider. Not available in pre-release.

Multi-factor authentication

Planned: WebAuthn and FIDO2 keys, TOTP authenticators, and platform passkeys. SMS will not be offered as a primary factor. Not available in pre-release.

Role-based access

Permissions scope to module, case type, and individual case. Coordinator, investigator, decision-maker, advisor, and observer roles ship by default. Custom roles are not configurable in pre-release.

Session management

Planned: configurable idle timeout, IP allowlists, and forced re-authentication on sensitive actions. Not available in pre-release.

Audit & monitoring

Field-level audit trail

Writes, exports, and access grants are recorded with actor, timestamp, and the prior value. The log is append-only: update and delete are refused at the database, and each entry’s integrity hash incorporates the previous entry’s, per tenant, so a verifier can walk the chain and return every break. Customers cannot disable it. Neither can we.

SIEM export

Planned: pipelines to Splunk, Microsoft Sentinel, and Sumo Logic, with webhook forwarding for institutions running their own stack. Not available in pre-release.

Anomaly detection

Planned: alerting on unusual access patterns such as off-hours bulk exports, cross-role reads, and atypical IP geography. Not available in pre-release.

Retention & legal hold

Configurable retention per case type, with legal hold that overrides automatic deletion. Planned: cryptographic erasure of aged-out records. Not available in pre-release.

Infrastructure

Hosting

AWS us-west-2. US-only data residency. We do not subprocess to non-US infrastructure. Multi-region failover is planned and not available in pre-release.

Availability

Continuous backups with point-in-time recovery, provided by our infrastructure platform. No uptime SLA is offered in pre-release, and recovery objectives have not been exercised.

Tenant isolation

Row-level security in Postgres, forced on every table, scopes every row to a tenant. Customer Data from one institution is not readable from another. Administrative access by OnePointe operators is possible by design. The named-staff restriction and access logging that will constrain it are being written and are not in place in pre-release.

Vulnerability management

Penetration testing

No external penetration test has been performed. One will be commissioned before general availability, and the summary will be published here.

Dependency & container scanning

Planned: automated dependency and container scanning in the build pipeline. Not in place in pre-release.

Continuous review

We do not run a paid bug-bounty program, and we do not yet run automated scanning or third-party penetration testing. Vulnerability reports are always welcome at security@onepointe.ai, encrypted to our published key.

Security changelog

A public changelog at /updates will record every security-relevant change, with severity, from general availability onward.

Incident response

If we identify a security event affecting Customer Data, we will notify the affected institution within 24 hours, before public disclosure. Each tenant has a named incident channel and a designated contact at OnePointe. A post-incident report is delivered within 14 days, with root cause, remediation, and any structural changes adopted.

Compliance & frameworks

We operate as a FERPA school official under each Institution's direction. We have no third-party audit, certification, or accessibility conformance report, and we will say so plainly until we do. Control mappings to ISO/IEC 27001 and the NIST Cybersecurity Framework are in progress and are shared as drafts, labelled as drafts.

Business continuity & resilience

Production runs in a single U.S. region on a managed Postgres platform that takes continuous backups with point-in-time recovery. We have not performed a disaster-recovery exercise, and we publish no recovery-time or recovery-point objective. Multi-region replication, tested restores, and scheduled DR exercises are planned before general availability.

Responsible disclosure

If you believe you have found a vulnerability, write to security@onepointe.ai with enough detail to reproduce it. We will acknowledge every report, keep you updated, and will not pursue good-faith research that respects our users' privacy and avoids service disruption or data destruction. We do not commit to a response time in pre-release, because reporting intake is not yet staffed around the clock. Please give us reasonable time to remediate before any public disclosure.

Privacy policyEffective 2026-01-01

Privacy policy.

This policy explains what OnePointe collects, how we use and share it, how long we keep it, and the choices you have. It is written to be read. If anything is unclear, write to privacy@onepointe.ai and we will explain or rewrite it.

At a glance

You control case data

For case data, the Institution is the controller. OnePointe processes it only on documented instructions under a Data Processing Agreement.

We do not sell personal information

No selling, no advertising use, and no third-party ad tracking on any OnePointe property.

Retention follows your rules

Case data is retained per the Institution's configured retention and legal-hold rules, with deletion recorded in the audit chain.

No training on your data

AI features are advisory. OnePointe does not train models and has no model to train, and the AI endpoint is your Institution's own.

OnePointe Technologies (“OnePointe,” “we,” “us”) is a case management technology company headquartered in Portland, Oregon. We provide software to colleges, universities, PK-12 districts, government agencies, employers, nonprofits, and similar institutions and organizations (“Institutions”). This policy applies to our public website and to the OnePointe platform where the platform links to it.

The two roles we play

For case data - the reports, parties, evidence, and records an Institution manages in the platform - the Institution is the controller and OnePointe is the processor, acting only on the Institution's documented instructions under a Data Processing Agreement. This policy does not govern an Institution's own handling of that data; the Institution's own privacy notices and applicable laws (including FERPA) do. For website visitors, prospective customers, applicants, and platform user-account data, OnePointe is the controller, and this policy describes our practices directly.

Information we collect

Information you provide. When you request a demo, contact us, apply for a role, or subscribe, you may give us your name, institutional email, phone, organization and role, the materials you upload (such as a resume), and anything you write to us.

Information provided by an Institution. To provision the platform, an Institution gives us the names, institutional emails, roles, and single-sign-on identifiers of the users it authorizes.

Case data (as processor). Institutions and their users enter reports, narratives, evidence, and decision records into the platform. The Institution decides what is entered; we do not collect it independently and we process it only under the Institution's instructions.

Information collected automatically. When you use the website we collect standard log and device information - IP address, browser and device type, pages viewed, links clicked, and timestamps - through cookies and similar technologies described in our cookie statement.

How we use information

As controller, we use information to: provide and secure the website; respond to inquiries and demo requests; evaluate job applications; deliver, support, and improve the platform for the Institutions that license it; process billing under a Platform Agreement; send service and security notices; conduct limited product and marketing analytics; enforce our terms and prevent fraud or abuse; and comply with law. As processor, we use case data only to provide the platform to the Institution and as its agreement directs.

AI processing

The platform's AI features draft, flag, summarize, and suggest, and are advisory only. Case content is processed for a single Institution and a single permission context at a time, and it is sent only to an AI endpoint the Institution itself configures and controls. OnePointe does not provide an AI service, holds no AI credential, and has no agreement with any model provider. The Institution's own agreement with its model provider governs how that provider may use the content. We do not use Customer Data to train models - ours or anyone's - and AI never reaches a finding, determination, or record without a named human. See the AI layer documentation for the full boundaries.

How we share information

We do not sell personal information. We share it only as follows:

  • Service providers (subprocessors) - vendors that host, deliver email, or monitor the service, each under contract to protect the data and use it only to serve us. The current list is on the subprocessors page.
  • The Institution - case data is visible to the Institution's authorized users according to the permission model it configures.
  • For legal reasons - to comply with law, respond to lawful requests, enforce our agreements, or protect the rights, safety, and property of OnePointe, our users, or the public.
  • Corporate transaction - in a merger, acquisition, or sale of assets, in which case the successor remains bound by this policy or gives notice of any change.
  • With your consent - or as otherwise disclosed at the point of collection.

How we secure information

We protect information with layered administrative, physical, and technical safeguards: encryption in transit and at rest, tenant isolation enforced at the database layer, least-privilege access, monitoring, and an append-only audit trail. Our practices are described on the security page. No system is perfectly secure, and we cannot guarantee absolute security, but we hold ourselves to recognized frameworks and test against them.

How long we keep information

As controller, we keep information only as long as needed for the purpose it was collected, then delete or de-identify it, subject to legal retention. As processor, we retain case data per the Institution's configured retention and legal-hold rules; deletion is recorded in the audit chain without retaining the deleted content. Applicant materials are kept for the current hiring cycle and a reasonable period after, unless you ask us to remove them sooner.

Your choices & rights

Where we act as controller, you may request to access, correct, delete, port, or restrict the personal information we hold about you, and object to certain processing such as marketing. To exercise a right, contact our Data Protection Officer at dpo@onepointe.ai. Where we act as processor, direct your request to the Institution that controls the data, and we will assist them. We do not make decisions producing legal effects about you through solely automated means.

Children's privacy

The website is not directed to children, and we do not knowingly collect personal information from children through it. Where an Institution uses the platform in a PK-12 context, the Institution controls that data and is responsible for the consents and protections that apply to students, including under FERPA and applicable state law; we process it solely as the Institution's processor.

FERPA, HIPAA & sector obligations

Case records an Institution stores in the platform may be education records subject to FERPA. OnePointe acts as a “school official” with a legitimate educational interest under the Institution's direction and uses such records only to provide the service. Where an Institution's use brings data within other regimes, the applicable terms are addressed in the Platform Agreement.

Analytics & marketing

On the public website we use limited, privacy-preserving analytics to understand which pages are useful; this is off until you opt in through the cookie banner and is never enabled inside the authenticated platform. We do not run behavioral advertising, and we do not permit third-party advertising cookies on our properties. You can manage optional analytics through the banner or your browser.

Cross-border data

OnePointe hosts and processes Customer Data in the United States. We do not transfer Customer Data to non-US infrastructure in the ordinary course. If you contact us from outside the United States, the information you send will be processed in the United States under this policy.

Your regional rights

California. California residents have rights under the CCPA/CPRA to know, access, correct, and delete personal information and to opt out of “sale” or “sharing.” We do not sell or share personal information as those terms are defined. Personal information we process as a service provider on an Institution's behalf is exempt; direct those requests to the Institution.

EU / UK / Switzerland. Where we are a controller and the GDPR or UK GDPR applies, our lawful bases are consent, contract, and legitimate interests, and you have rights of access, rectification, erasure, restriction, objection, and portability, and to withdraw consent and lodge a complaint with a supervisory authority. Where we are a processor, contact the Institution as controller.

Third-party sites

The website may link to third-party sites we do not control. This policy does not apply to them, and we are not responsible for their practices. Review the privacy policy of any site you visit.

Changes to this policy

We may update this policy to reflect changes in our practices or the law. We will post the revised policy here with a new effective date and, for material changes, provide additional notice where appropriate.

Contact us

For any privacy question or request, write to privacy@onepointe.ai or OnePointe Technologies, Oregon Square, Portland, Oregon. We answer every message ourselves.

Effective January 1, 2026. This policy supports, and is subordinate to, the Data Processing Agreement in any signed Platform Agreement.

Terms of UseEffective 2026-01-01

Terms of Use.

These Terms govern access to the OnePointe marketing site and, together with the signed agreement between OnePointe and an Institution, the OnePointe platform. By using the Site you accept these Terms. If you do not agree, do not use the Site.

At a glance

The Platform Agreement controls

Institutions use the platform under a signed agreement. Where it conflicts with these Terms, the signed agreement wins.

Plain-language Site terms

These Terms govern the marketing site and the OnePointe services that link to them.

Your responsibilities, defined

Use the Site lawfully, keep credentials confidential, and respect OnePointe intellectual property.

Liability is limited

OnePointe's liability for Site claims is capped as described in the limitation of liability section.

In these Terms, OnePointe (also we, us, or our) means OnePointe Technologies, a Delaware corporation headquartered in Portland, Oregon, affiliated with Fractional Coordinator, Inc. The Site means this website and any OnePointe website, application, API, email notification, or other service that links to these Terms. You means the individual or entity using the Site. Where you use the Site on behalf of an Institution, you represent that you are authorized to bind that Institution to these Terms.

Acceptance & changes

Using the Site constitutes acceptance of these Terms. We may revise these Terms at any time by posting an updated version to this page with a new effective date. Continued use of the Site after a change takes effect is acceptance of the revised Terms. We recommend reviewing this page periodically.

Relationship to the platform agreement

Access to the OnePointe platform is licensed to Institutions under a separate signed agreement (the Platform Agreement), which includes a Data Processing Agreement and, where applicable, a service-level commitment. If any conflict exists between these Terms and a Platform Agreement, the Platform Agreement controls with respect to the platform. These Terms govern the public Site in all cases.

Who may use the Site

You must be at least 16 years of age to use the Site. The Site is intended for Institution staff, prospective customers, applicants, and members of the public seeking information about OnePointe. It is not the intake channel for a report; if you need to file a report, use the intake link provided by your Institution.

OnePointe intellectual property

The Site and its content, software, and features - including text, graphics, logos, icons, images, and the selection and arrangement of them (the OnePointe Content), and the OnePointe name, the wordmark, and the terminal point (the Marks) - are the property of OnePointe or its licensors and are protected by intellectual-property laws. Nothing in these Terms grants you a right to use the Marks or any confusingly similar mark.

Limited license to you

Subject to these Terms, OnePointe grants you a personal, non-exclusive, non-transferable, revocable license to access the Site and to download or print a single copy of publicly available content for your own reference. This license does not permit republication, redistribution, aggregation, resale, or any commercial use of the OnePointe Content without our prior written permission.

Restrictions on use

You will not: (a) remove or alter any proprietary notice; (b) reproduce, use, or imply endorsement through any Mark; (c) modify, create derivative works of, decompile, or attempt to extract source code from the Site except as permitted by law; (d) copy or adapt the Site's underlying code; (e) use any automated means - bot, spider, scraper, or similar - to access, harvest, or index the Site other than standard search-engine crawling of public pages; (f) probe, scan, or test the vulnerability of any system or breach any security or authentication measure; or (g) use the Site in a way that violates any applicable law or the rights of any third party.

Accounts & security

Certain areas require an account, provisioned to Institution personnel through the Platform Agreement and secured by single sign-on or passkey. You are responsible for activity under your account, for maintaining the confidentiality of your credentials, and for notifying us promptly of any suspected unauthorized access. We may suspend or reset access at our discretion where necessary to protect the platform or comply with law.

Content you submit

If you submit content to the Site - for example, a demo request, a job application, or an inquiry (User Content) - you represent that you have the right to submit it and that it is accurate. You grant OnePointe a non-exclusive, worldwide, royalty-free license to use that User Content for the purpose for which you submitted it. Customer Data entered into the platform is governed by the Platform Agreement and the privacy policy, not by this section.

Acceptable conduct

You will not post or transmit through the Site any content that is unlawful, infringing, defamatory, harassing, hateful, threatening, obscene, or that discloses another person's sensitive personal information without authorization; and you will not use the Site to bully, impersonate, or deceive. We may remove content or restrict access where we reasonably believe these Terms have been violated.

Privacy & data protection

Our handling of personal information in connection with the Site is described in the privacy policy, and our use of cookies in the cookie statement. Processing of Customer Data on the platform is governed by the Data Processing Agreement within the Platform Agreement.

Artificial intelligence

The platform includes AI features that draft, flag, summarize, and suggest. Those features are advisory only: they do not assign credibility, reach findings, determine outcomes, or finalize records, and every consequential action requires a named human. We do not train AI models on Customer Data. The AI provisions of the Platform Agreement govern the platform; nothing on the public Site is a determination of any matter.

Third-party content & links

The Site may link to third-party sites or reference third-party content. We do not control and are not responsible for third-party content, and a link is not an endorsement. Your use of any third-party site is governed by that site's own terms and policies, which you should review.

No professional advice

Content on the Site is provided for general information and does not constitute legal, compliance, or other professional advice, and does not create an attorney-client or advisory relationship. Institutions remain responsible for their own compliance decisions. You should consult qualified counsel for advice on a specific matter.

Reporting concerns

To report content or conduct that may violate these Terms, write to terms@onepointe.ai. For a security concern or vulnerability, write to security@onepointe.ai. To report a claim of intellectual-property infringement, include the work claimed to be infringed, the material at issue, your contact information, a good-faith statement, and a statement under penalty of perjury that you are authorized to act; send it to legal@onepointe.ai and we will respond in accordance with applicable law.

Disclaimers

The Site is provided on an "as is" and "as available" basis. To the fullest extent permitted by law, OnePointe disclaims all warranties, express or implied, including merchantability, fitness for a particular purpose, title, and non-infringement. We do not warrant that the Site will be uninterrupted, error-free, or free of harmful components, or that content is accurate or current. This section does not limit any warranty made expressly in a Platform Agreement.

Limitation of liability

To the fullest extent permitted by law, OnePointe and its officers, employees, and agents will not be liable for any indirect, incidental, consequential, special, or punitive damages, or for lost profits, data, or goodwill, arising from your use of the Site. Liability arising from a Platform Agreement is governed by that agreement. Nothing here limits liability that cannot be limited by law.

Indemnification

You agree to indemnify and hold harmless OnePointe from claims, losses, and reasonable expenses arising from your misuse of the Site, your violation of these Terms, or your violation of any law or third-party right, except to the extent caused by OnePointe.

Suspension & termination

We may suspend or terminate your access to the Site at any time where we reasonably believe you have violated these Terms or where necessary to protect the Site or comply with law. Sections that by their nature should survive - including intellectual property, disclaimers, limitation of liability, and indemnification - survive termination.

Governing law

These Terms are governed by the laws of the State of Oregon, without regard to conflict-of-laws principles. Any action relating to these Terms and the Site will be brought exclusively in the state or federal courts located in Multnomah County, Oregon, and you consent to their jurisdiction. Nothing in this section overrides a governing-law or dispute-resolution clause in a Platform Agreement.

Use outside the United States

OnePointe operates from and hosts within the United States. We make no representation that the Site or platform is appropriate or available for use in other locations. If you access the Site from outside the United States, you do so on your own initiative and are responsible for compliance with local law.

General

These Terms, together with the privacy policy, the cookie statement, and any applicable Platform Agreement, are the entire agreement between you and OnePointe regarding the Site. If any provision is held unenforceable, the remainder stays in effect. Our failure to enforce a provision is not a waiver. You may not assign these Terms; we may assign them in connection with a merger, acquisition, or sale of assets. Section headings are for convenience only.

Effective January 1, 2026. Questions: terms@onepointe.ai. These Terms are provided for the public Site; the Platform Agreement governs the licensed platform.

Accessibility statementWCAG 2.1 AA

Accessibility is a feature, not a finish.

OnePointe is designed to be usable by people with the full range of vision, hearing, mobility, and cognitive abilities. We hold ourselves to WCAG 2.1 Level AA across the product, including the public intake form that anyone may need to reach in a hard moment.

At a glance

WCAG 2.1 Level AA

The product and the public intake form are designed and self-tested against WCAG 2.1 AA. No third party has audited them.

Tested with real assistive technology

Keyboard-only and reduced-motion passes, plus VoiceOver on macOS. Broader screen-reader coverage is planned and not yet in place.

Honest about gaps

Known limitations are listed on this page with dates, and remediation is tracked to completion.

Every report answered

We answer every accessibility report. We do not commit to a response time in pre-release.

Our standard

OnePointe conforms to WCAG 2.1 Level AA across the platform and the public intake form. We test against this standard before release and remediate as conformance regresses.

How we work

  • Design review against accessibility heuristics on every screen.
  • Planned: automated accessibility checks in CI. Not in place in pre-release.
  • Manual keyboard and VoiceOver review. NVDA, JAWS, and TalkBack coverage is planned.
  • Planned: user research with assistive technology users. None has been conducted.
  • No VPAT exists yet. One will be produced from a third-party audit before general availability.

Known limitations

  • Interactive heat map - keyboard-only navigation is functional but not yet ideal. Q3 2026.
  • Drag-and-drop reordering - keyboard alternative ships Q2 2026.
  • Legacy embedded reports - third-party embeds that have not yet been re-tagged for accessibility. Replacement in progress.

Compatible technology

At general availability OnePointe will be tested against the following. In pre-release, only the desktop browsers and VoiceOver have been exercised.

  • Chrome, Edge, Safari, and Firefox on desktop and mobile.
  • NVDA on Windows with Chrome and Firefox.
  • JAWS on Windows with Chrome and Edge.
  • VoiceOver on macOS Safari and iOS Safari.
  • TalkBack on Android Chrome.
  • Dragon NaturallySpeaking, ZoomText / MAGic, and switch access.

Get in touch

If you encounter a barrier or have a specific access need, write to hello@onepointe.ai. Please include the page or screen, what you were trying to do, and the assistive technology you were using; it helps us reproduce and fix the issue quickly.

If we cannot resolve it

If a barrier prevents you from completing something that matters and we have not resolved it to your satisfaction, ask for it to be escalated to our accessibility lead, who will provide a written response and a target remediation date. Institutions may also raise unresolved concerns through their contract's support channel. Nothing here limits any right you may have under the Americans with Disabilities Act, Section 504 of the Rehabilitation Act, or applicable state law.

Standards we align to

Our standard is WCAG 2.1 Level AA across the platform and the public intake form. We intend to document conformance against Section 508 of the Rehabilitation Act and EN 301 549 for institutions that require them. No conformance report exists yet. Where a criterion is not yet fully met, it is listed under known limitations above with a target date.

The intake form comes first

The complainant-facing intake form is held to the highest bar we apply. The reasoning is simple: the person reaching that form may be having the worst week of their year, may be using assistive technology, and may need to leave quickly. The calmer and more reachable that front door is, the better the rest of the case goes.

Basis & review

OnePointe is in pre-release and has had no general-availability release. This statement describes the standard we design and self-test against, the Web Content Accessibility Guidelines (WCAG) 2.1 Level AA, not a conformance finding. No Accessibility Conformance Report or VPAT exists yet.

Statement effective January 1, 2026, and reviewed each major release. Report a barrier: hello@onepointe.ai.

ContactWe answer every message ourselves

Talk to a real practitioner.

Whether you are evaluating OnePointe for your institution or you already run it, here is how to reach the right person - usually a former coordinator or dean, not a sales rep. Average reply under four hours during the business day.

Talk to sales →Get support →

Talk to sales

Evaluating OnePointe for your institution?

Tell us a little about your institution and what you are trying to solve. We will match you with someone who has held the coordinator or investigator seat and can speak to your actual workflow.

  • A 30-minute walkthrough led by a peer, not an SDR
  • We model your sanitized scenarios live
  • You leave with a security packet for your CIO
  • Honest, published pricing - no games

Prefer to skip ahead? Book a walkthrough directly or get started.

Sales inquiry
A former coordinator replies within one business day.

Other ways to reach us

Product support

Already running OnePointe? Reach the team that knows your deployment.

support@onepointe.ai →

Security & trust

Diligence questions, the security packet, or vulnerability reports.

Request the packet →

Partnerships

Founding-partner pricing and a three-year agreement priced to ramp.

Partner program →

Press & media

Interviews, background, and company facts for the newsroom.

press@onepointe.ai →

Careers

We hire slowly and on purpose. Several roles are reserved for practitioners.

See open roles →

General

Anything else. We read and answer every message ourselves.

hello@onepointe.ai →

Our office

CompanyOnePointe Technologies
HeadquartersOregon Square, Portland, Oregon
HoursMonday–Friday · 8am–6pm Pacific
nePointe®

Request a demo

Tell us who is coming and what you want to see.

01 · Who's coming

Prefer email? Contact us · Back to onepointe.ai

Partner Institution ProgramFounding-partner pricing

One agreement, priced to ramp.

We partner with institutions on a single three-year agreement, in exchange for honest feedback and a willingness to shape the product alongside us. Year one begins at $2,000 plus $250 per month. Year two runs at half the published rate. Year three settles at $1.75 per student, locked as your founding-partner rate for the life of the relationship.

$2,000 to begin$250 / mo · first 12 months30-day exit if performance commitments are not met90-day transition support at termination

What's included

A real partnership, not a trial.

01

Full platform access

Every feature, at full depth. The same software our paying customers run, no tier limits. Core modules included; add-ons optional.

02

Hands-on implementation

Data migration, SSO setup, workflow configuration, and staff training, on-site or remote.

03

Dedicated implementation support

A dedicated success manager, priority response, and quarterly performance reviews to refine workflows.

04

Yours to keep

Records, workflows, and configuration exported in standard formats at any time. No data lock-in.

05

Founding-partner pricing

Year one at $5,000 all-in, year two at half the published rate, and the published rate locked from year three for the life of the relationship.

06

A voice in the roadmap

Direct input into features and module priorities. What you need from this work helps shape what we build next.

OpenNow accepting institutions
$2KTo begin · year one
$250Per month · first 12 months

What partners commit: an executive sponsor · quarterly feedback sessions · roadmap input · a reference or case study at month twelve.

Secure form
Applications reviewed weekly. Open to institutions of every size.
Security packet requestDiligence

A briefing your CIO can actually use.

An eight-document packet, delivered under mutual NDA via DocuSign. Designed for CIO, CISO, General Counsel, and procurement review.

Hash-chained audit WCAG 2.1 AA FERPA school official US-hosted tenant-isolated AES-256 encrypted

How to request it

1Ask

Send the request below or write to trust@onepointe.ai from an institutional address.

2Mutual NDA

We return a short mutual NDA via DocuSign the same day. Countersign at your pace.

3Delivered

The full packet arrives within two business days of a countersigned NDA, with a named engineer to answer questions.

What's in the packet

01

FERPA addendum and school official designation

Our standard FERPA School Official Designation language, ready to attach to your subscription agreement.

02

Data Processing Addendum (DPA)

Standard contract clauses for data processing under FERPA, GDPR, and applicable state privacy laws.

03

Business continuity and disaster recovery plan

Our backup architecture and the recovery procedures we are building toward. No disaster-recovery exercise has been run yet, and no RPO or RTO is committed in pre-release.

04

Subprocessor list with flow-down terms

Every vendor that touches your data, what they do, where they are hosted, and the contractual flow-down terms.

05

Incident response plan with notification SLA

Our notification commitments, escalation paths, and post-incident reporting standards.

06

One-page summary for the CIO

A short executive overview your CIO can read in five minutes and forward to their team.

Send the request

Secure form
NDA sent within one business day. Packet delivered within two of execution.
Applicationcareers@onepointe.ai

Apply to OnePointe.

Resumes tell us where you have been. This application tells us how you think and what you have actually shipped. It takes a little longer than a one-click apply, on purpose - we read every one ourselves, and reply.

About you

The basics.

Show us your work

Prove it, in your words and your work.

Answer what is relevant to your role, and attach the work that backs it up. Specifics beat polish - we would rather see one real thing you built and understand exactly what you did than read a page of adjectives.

Your work, beyond the CV

Attach the things that show your judgment - a document, a deck, a writing sample, a case study, code, or a design. This is what we look at first.

Primary work sample *The one thing that best represents your work. Up to 15 MB.
Additional materialsOptional. Writing, code, case studies, references. Multiple files allowed.
Resume or CVOptional. We read work samples first.

How we hire

What happens next.

01

We read it ourselves

Every application reaches the hiring team directly, and we reply. Work samples and references from people you have actually shipped with carry the day - resumes are optional.

02

A conversation, not a gauntlet

If there is a fit, you talk with the people you would actually work with. We go deep on the work you described here.

03

A practical exercise

For some roles, a short exercise or a closer look at the work you submitted, reflecting the real work. We are evaluating each other.

04

References and offer

We speak with your references, then move quickly. Engineering is fully remote with quarterly weeks in Portland; our administrative staff work in person at our Oregon Square headquarters.

Your application goes directly to the hiring team. Fields marked * are required.

Platform statusPre-release

System health.

OnePointe is in pre-release. Component-level status reporting and incident history begin at general availability.

Until then, questions about availability, planned maintenance, or a specific incident go to trust@onepointe.ai and are answered by a person rather than a dashboard.

This page will publish live component status and a rolling incident history once the platform is generally available.

NewsroomNews · writing · press

News from OnePointe.

Announcements, product milestones, and writing from the team. For interviews, background, or brand assets, write to press@onepointe.ai. We answer every message ourselves.

Announcement

A quietly intelligent platform for the work institutions take most seriously.

OnePointe is in development with its first partner institutions, building one front door for reports, one case file, and one defensible audit trail across Title IX, Title VI, Title VII, conduct, ADA/504, and behavioral intervention. A note from the founder on why it exists, and what it will never do.

Read the note

The brand, in brief

Case Management / AI-powered / Built for operational compliance

Sensitive cases, handled with the care they deserve.

The signature line - OnePointe's primary expression. Lead with it.

What we are

OnePointe is a quietly intelligent case management platform for the teams that handle civil-rights, conduct, and workplace investigations. One front door, one case file, one defensible audit trail.

The voice

It drafts. It flags. It summarizes. It never decides.

Canonical. Quote verbatim - do not paraphrase.

The name

Always OnePointe - one word, capital O and P. Never "One Pointe," "Onepointe," or "1Pointe." Legal entity: OnePointe Technologies. Affiliation: Fractional Coordinator, Inc.

The point

The orange terminal point is part of the mark. Do not recolor, resize, or remove it.

The wordmark

OnePointe® OnePointe®

The mark & wordmark

nePointe® nePointe®

Newsreader, italic Pointe, orange point. The mark forms the “O” in the primary lockup; use the wordmark alone only where the mark cannot render.

The palette

Click a swatch to copy its hex. Full asset kit (SVG, PNG, clear-space) on request.

The mark

The aperture mark, which also forms the “O” in the wordmark. Keep clear space around it, and do not rotate or recolor it outside the palette.

Download the mark

For light backgroundsMark · ink · PNG↓ For dark backgroundsMark · cream · PNG↓

Transparent PNG, 512 px. Vector (SVG) and full lockups available on request.

For press

About OnePointe. OnePointe is a quietly intelligent case management platform for the teams that handle civil-rights, conduct, and workplace investigations. Built by practitioners, it gives institutions and organizations one front door for reports, one case file, and one defensible audit trail, with AI that drafts, flags, and summarizes without ever deciding. OnePointe Technologies is headquartered in Portland, Oregon.

Press inquiries and brand-asset requests: press@onepointe.ai.

Quick facts

CompanyOnePointe Technologies
HeadquartersPortland, Oregon
Founded2026
CategoryCivil-rights & workplace case management
nePointe®

Sign in to OnePointe

We suggest using the email address you use at work.

or sign in with email

OnePointe signs you in with SSO, passkeys, or a one-time email link. There is no password to type, phish, or reset.

or

Using a specific workspace? Sign in to a workspace

New to OnePointe? Create your workspace

Back to onepointe.ai

nePointe®

Claim your workspace

Reserve your institution’s address. Held for 30 days, with no account created and nothing billed.

Lowercase letters, numbers, and hyphens.

Product updatesCommunications

What changed, and why.

Every release, every security-relevant change, every deprecation. Written for the people who own the audit when it arrives.

Release notes, the morning they ship. No marketing, ever.

The record

UpdatePlatform

OnePointe is in pre-release

OnePointe is in development with its first partner institutions. Release notes begin at general availability. Subscribe above to receive them the morning they ship.

You have reached the beginning of the record. Ask us anything →

Stay in the loop

Questions about a change?

Release notes, security changes, and deprecations, written for the people who own the audit. Ask us anything, or subscribe above for the morning they ship.

Ask us anythingDocumentation ▸
Subprocessor listCurrent as of 2026-09-21

The small set of vendors behind the platform.

A subprocessor is a third party OnePointe engages to help deliver the service. We rely on a deliberately small group, each bound by contract to protections at least as strong as those in our own agreement with your Institution. This page is the current, authoritative list.

At a glance

A deliberately small list

Three vendors, each named on this page. No AI provider, because the AI endpoint is your Institution's own.

Bound by contract

Each subprocessor is held to protections at least as strong as our agreement with your Institution.

Processing in the United States

Customer Data is processed and stored in US regions.

30 days notice, right to object

Institutions receive at least 30 days notice before any subprocessor change, with a documented right to object.

Current subprocessors

Supabase
Managed Postgres, authentication, file storage, and serverless functions. US region (us-west-2), running on Amazon Web Services infrastructure. Processes and stores Customer Data at rest and in transit, encrypted.
United States
Vercel
Application hosting, edge delivery, and serverless functions for onepointe.ai and the application. Processes request data in transit. Does not store Customer Data at rest.
United States
Resend
Transactional email delivery for system notifications, account events, and audit alerts. Processes recipient address and message metadata only. No marketing email, no case content.
United States

This list is authoritative and versioned, and there is no AI subprocessor on it. OnePointe does not provide an AI service: each Institution configures its own AI endpoint, under its own agreement with its own model provider, and OnePointe holds no credential for it. A model provider an Institution chooses is that Institution's subprocessor, not ours, and so does not appear here. See the AI layer documentation and privacy policy for the boundaries that govern it.

How we vet a subprocessor

  • Security and privacy review before engagement, including current SOC 2 or ISO 27001 evidence.
  • A signed data processing agreement with confidentiality and breach-notification obligations at least as protective as ours.
  • Data minimization by default: each subprocessor receives only the categories of data its function requires, and no more.
  • Periodic re-review, and removal when a vendor is no longer needed.

Categories of data shared

The database and storage layer (Supabase) processes Customer Data under encryption; application hosting (Vercel) sees it only in transit; email delivery processes routing metadata only. No subprocessor on this list processes prompt content, because the AI endpoint belongs to the Institution. Where a subprocessor could process Customer Data, the row above says so plainly.

International transfers

OnePointe is hosted in the United States, and our subprocessors process data in the United States. We do not transfer Customer Data outside the U.S. in the ordinary course. If that ever changes, we will update this page and provide the notice described below before the change takes effect.

Change notification & your right to object

We give Institutions at least 30 days notice before adding or replacing any subprocessor that processes Customer Data. To receive these notifications, or to raise a reasonable objection to a proposed subprocessor on data-protection grounds, write to subprocessors@onepointe.ai. Objection handling, including your remedies if an objection cannot be resolved, is governed by the data processing agreement in your contract.

This page supports our commitments under the Data Processing Agreement. In any conflict between this page and a signed agreement, the signed agreement controls.

Cookie statementEssential by default

Cookie statement.

This statement explains what cookies are, which ones OnePointe uses, and how you control them. For the fuller picture of how we handle personal information, see the privacy policy.

At a glance

Essential by default

Only essential cookies are set unless you opt in to more.

Analytics is opt-in

Aggregated and de-identified, and never enabled inside the authenticated platform.

No cross-site ad tracking

No interest-based advertising cookies and no third-party ad networks on any OnePointe property.

You are in control

Change your choices at any time via the Cookie preferences link in the footer.

What cookies are

Cookies are small text files a website asks your browser to store on your device. They let a site remember information between visits - such as keeping you signed in or remembering a preference. Cookies cannot read other files on your device, and the ones described here do not carry case data.

Our approach: essential by default

OnePointe sets essential cookies only unless you choose otherwise. Non-essential cookies stay off until you opt in through the banner, and we honor that choice on the device that made it. We do not use interest-based advertising or cross-site tracking cookies on any OnePointe property, and none are permitted inside the authenticated platform beyond what the platform needs to function.

The categories we use

CategoryWhat it does
Sign-in & securityAuthenticates you, keeps a session active, and protects forms against cross-site request forgery. Essential; cannot be switched off.
PreferencesRemembers choices such as your cookie decision so we do not ask again. Essential for the choice to persist.
AnalyticsOptional. Aggregated, de-identified usage of the marketing site to see which pages are useful. Off until you opt in; never enabled in the authenticated application.
MarketingOptional. First-party referral and conversion measurement so we know which channels reach institutional buyers. Off until you opt in. No cross-site ad tracking.
Social mediaOptional. Embedded LinkedIn and X content sets cookies from those platforms when it loads. Off by default; embeds load only after you enable them.
AdvertisingNot used. We set no interest-based advertising cookies and permit no third-party ad networks.

The specific cookies

CookiePurpose · type · duration
op_sessionKeeps you signed in. First-party, strictly necessary. Session - expires on sign-out or idle timeout.
op_csrfCross-site request-forgery protection. First-party, strictly necessary. Session.
op_consentStores your cookie choice. First-party, strictly necessary. 12 months.
op_analyticsSet only if you opt in. First-party, aggregated analytics. 12 months.

How to control cookies

Use the banner on your first visit, or write to cookies@onepointe.ai at any time, to change your choice. You can also block or delete cookies through your browser settings; note that disabling essential cookies will stop parts of the site from working. Browser instructions: Chrome, Safari, Firefox, and Edge.

Do Not Track

Because we set no advertising or cross-site tracking cookies, there is nothing for a Do Not Track signal to switch off. We honor it regardless: a DNT signal keeps optional analytics off, whatever the banner says.

Changes & contact

We will update this statement if our cookie use changes and post the revised version here. Questions: cookies@onepointe.ai.

Last updated January 1, 2026.

DocumentationAPI v1

How OnePointe actually works.

Technical reference for the OnePointe platform: architecture, the data model, the AI layer, and the developer surface. Documented from the product as shipped. Institutions on a current contract have this library inside the admin console alongside a dedicated implementation engineer.

REF-A1 Architecture & tenancy

Every Institution's records are isolated at the database layer by row-level security, enforced by Postgres on every query rather than by application code. Each row carries its Institution's identifier, and no query path can return another Institution's rows.

Regions & resilience

Production runs in a single U.S. region, AWS us-west-2, on a managed Postgres platform with continuous backups and point-in-time recovery. Storage is encrypted at rest and in transit. Cross-region replication, automatic failover, and customer-managed keys are planned and are not available in pre-release; we publish no RPO or RTO until they have been exercised.

Environments

Planned: separate production and sandbox environments per tenant, with sandbox as the required target for API integration testing. Not available in pre-release.

Release trains

Platform releases ship monthly; security patches ship out-of-band. Every release is documented in the changelog with migration notes where behavior changes.

REF-A2 Data model

OnePointe's record system is a small set of first-class objects. Identifiers are human-legible and stable: a prefix, the year, and a sequence, so CAS-2026-0418 reads the same in the UI, the API, the audit log, and a hearing transcript.

ObjectPrefix · description
IntakeINT- A submitted report, prior to triage. Immutable once received.
CaseCAS- The unit of work. Carries module, status, owner, and the thirteen file sections.
PartyPTY- A person in a role on a case: complainant, respondent, witness, advisor.
EventEVT- A timeline entry. Human-entered, system-generated, or an accepted AI draft.
EvidenceItemEVD- A file or exhibit with chain-of-custody metadata and source-aware timestamps.
InterviewRecordIVW- Formal interview documentation, distinct from private work-product notes.
TaskTSK- An open item or milestone on a case's ledger.
ApprovalAPR- A pending or resolved supervisor decision: interim measures, determinations.
CareRecordCRE- A behavioral-intervention entry in the CARE Network queue.
AuditEntryAUD- One append-only line in the access & modification log. Cryptographically chained.

Retention & legal hold

Retention policies apply per module and per object type; legal hold overrides retention at the case level and is itself an audited action. Deletion is a state, not an erasure of the audit chain: the log records that a record existed and was purged, without retaining its content.

REF-A3 Admin & permissions

Access is governed by five permission levels, assigned per person in Team & users and scoped per module: an investigator can hold L3 in Title IX and L1 everywhere else.

L1 · Reader
Read-only access. Can view dashboards, search policies, and follow assigned matters, but cannot edit cases or records.
read-only
L2 · Trainee
Works under direct supervision. Can document interactions on assigned cases but cannot finalize determinations.
supervised
L3 · Investigator
Independent caseload. Manages assigned investigations end to end and can request supervisor approval on key decisions.
independent
L4 · Senior
Senior investigator or coordinator. Runs complex cases, mentors trainees, assigns work, and approves interim measures.
approver
L5 · Supervisor
Compliance director. Supervises team workload, approves determinations, and sees all cases across the institution.
full scope

Approvals

Actions above a person's level route into an approval flow rather than failing silently: an L2's case note stands, but their proposed determination waits for L5 sign-off, and interim measures proposed by an L3 wait for an L4. Approvals are objects (APR-), carry their full decision thread, and land in the audit log with both actors.

Role configuration

Custom roles compose from the same permission primitives in Role configuration: advisors, hearing officers, and observers are common additions. The audit trail reads identically regardless of role naming.

REF-A4 Intake & routing

Every report enters through one front door. The public intake asks a single question, what would you like to do, and routes to the right form or a secure status check. Submissions become immutable Intake objects marked awaiting triage, where an L3 or above assigns a module, an owner, and an initial status.

Quick actions

Staff-originated records skip the public form: + New case opens a full case shell, + New CARE record starts a behavioral-intervention entry, and + New FYI note files an informational report that creates a record without opening a case.

The status lifecycle

Cases move through a fixed vocabulary so reporting stays consistent: in_review → investigation → interim_measures → hearing | informal_resolution → resolved → closed. Transitions are timestamped, attributed, exposed at PATCH /cases/{id}/status, and emitted as case.status_changed webhook events. SLA tracking measures the gaps between them.

REF-A5 The case file

A OnePointe case is one document with thirteen standing sections. Nothing lives in email or a side spreadsheet; if it matters to the case, it has a place in the file:

  • Who's involved and Parties to this case - people and roles, with contact posture
  • What's alleged - the allegation record, policy citations, and module classification
  • Where this case stands - current status, owner, deadlines, and SLA position
  • Case chronology - the unified timeline; AI-reconstructed entries carry draft state until an investigator accepts them
  • Formal interview records and Private notes from the case team - separated documentation with independent visibility rules
  • Case documents and evidence inventory - chain-of-custody metadata, source-aware timestamps
  • Messages with parties - platform-sent communications, logged verbatim
  • Generate standard documents - notices drafted from templates, filled from the record, held for human review
  • Status updates & supervisor review - the approval thread
  • Open items & completed milestones - the case's task ledger
  • Access & modification log - every view, edit, export, and approval, append-only

Hearings

Pre-hearing conferences, hearings, and check-ins are scheduled from the case and appear on every participant's Schedule with confirmation state; outcome records attach back to the file automatically and emit hearing.scheduled events for calendar integrations.

REF-A6 Everyday work

The Dashboard opens on what is most pressing: intakes awaiting triage, cases flagged high-risk, team caseload, and SLA position, with the day's schedule underneath. Tasks aggregates open items across every case you own or supervise; Schedule carries case context on every event; Direct Messages keeps coordination inside the tenant, logged, instead of in personal text threads.

People and the CARE Network

People is the institutional directory with case-aware context for authorized roles. The CARE Network gives behavioral-intervention teams a shared queue, meeting cadence, and de-identified escalation path that connects to Conduct or Title IX when a matter crosses lines.

The command bar

Press ⌘K anywhere to ask about cases, policy, or people. Retrieval is permission-scoped to records the person can already see, answers cite the record they drew from, and the interaction is logged. See the AI layer for the full contract.

REF-A7 Reports & audit

The Reports module produces the numbers institutions are actually asked for: caseload and SLA summaries, module breakdowns, Clery roll-ups ready for Public Safety's CSA submission, and the campus heat map of case density by building and time of day, de-identified with aggregation thresholds configurable per institution.

The audit trail

Every case carries an append-only access & modification log; the tenant-level Audit view unifies them for compliance review. Entries are hash-chained (each entry commits to the previous entry's hash) and exportable. Neither customers nor OnePointe can disable the log. Schema and streaming options are documented under Audit export & SIEM.

Exports

Cases, reports, and logs export in standard formats at any time via the UI or POST /exports, including full OCR-ready case assembly: the whole record, in order, with the log attached.

REF-B1 The AI layer · bring your own

OnePointe does not provide an AI service and does not resell inference. Each institution points OnePointe at an AI endpoint it owns and controls, running under its own agreement with its own model provider. OnePointe stores no AI credential. Requests are signed with OnePointe's own key so the institution can verify where a call came from, and an institution revokes access by taking its endpoint down, with no action required from us. OnePointe speaks the request formats of the major American AI systems, so an institution can use whichever it has already procured: Anthropic's Claude, OpenAI's GPT, Google's Gemini, and xAI's Grok, reached directly or through Microsoft Azure OpenAI, AWS Bedrock, or Google Vertex AI. Naming these systems describes what OnePointe can send a request to. It is not a partnership, an endorsement, or a contract between OnePointe and any of them. Institutional case data is never used to train models, ours or anyone's, and never crosses tenant boundaries: each invocation is scoped to a single tenant and a single permission context.

What it does

  • Timeline reconstruction - builds structured chronologies from case records, emails, interview summaries, and uploaded documents, surfacing sequence gaps and policy-relevant milestones
  • Interview question drafting - calibrated to the case's facts, with tone configurable per institution from formal to trauma-informed
  • Document drafting - notices and letters generated from templates and the case record, held for human review before sending
  • Investigation report drafting - assembles a structured draft report from the meeting notes, evidence files, and party and witness statements in the case file, with every assertion cited to the record and held for the investigator to verify and finalize
  • Summarization - the long file, condensed, with citations back to the record
  • The ⌘K command bar - retrieval-augmented answers over records the asker is already permitted to see

The contract: advisory, always

Every AI output is advisory, editable, and quarantined as a draft until a permitted human accepts it. AI-generated timeline entries carry draft state; generated documents cannot send themselves; the command bar answers questions and takes no actions. The system will not produce determinations, credibility findings, or sanction recommendations, by design and by policy, and requests for them are declined and logged.

Data boundaries

  • Context minimization - invocations receive only the case-scoped fields the feature requires, never bulk records
  • Permission-scoped retrieval - the command bar's retrieval index respects L-levels and module scoping; the model cannot see what the asker cannot
  • No training by OnePointe - OnePointe does not train models and has no model to train. Whether the institution's own provider may train on or retain content is governed by the institution's agreement with that provider, which OnePointe is not a party to and does not represent
  • Institution-chosen models - the institution names the model its endpoint runs and changes it on its own schedule. OnePointe does not pin, upgrade, or silently swap the model behind an institution's endpoint
  • Kill switch - administrators can disable AI features per module; disablement is immediate and audited

Every invocation is logged

AI activity is a first-class citizen of the audit trail. Each invocation writes an AuditEntry recording the feature, the model version, the actor whose permission context scoped it, and the disposition of the output:

{ "id": "AUD-2026-118204", "ts": "2026-04-18T17:09:00Z", "action": "ai.draft.generated", "actor": { "type": "system", "on_behalf_of": "usr_reyes_j", "level": "L4" }, "object": { "type": "Event", "id": "EVT-2026-90312", "case": "CAS-2026-0418" }, "detail": { "feature": "timeline.reconstruction", "model": "<the model your endpoint runs>", "sources": 41, "disposition": "draft.pending_review" }, "prev_hash": "9f2ac41b…", "hash": "5d17e08a…" }

REF-C1 Authentication & identity

Planned: SAML 2.0 and OIDC sign-in and passkeys (WebAuthn / FIDO2), with SMS excluded as a primary factor, and SCIM 2.0 provisioning and deprovisioning against your identity provider. Planned session controls include configurable idle timeout, IP allowlists, and forced re-authentication on sensitive actions such as exports and role changes.

API authentication

Server-to-server access uses OAuth 2.0 client credentials; scoped personal access tokens are available for administrative scripting. Tokens are tenant-bound and scope-limited:

ScopeGrants
cases:readRead cases, timelines, and parties within permitted modules
cases:writeCreate cases, append events, update status
intake:writeSubmit intakes programmatically (kiosk and partner-system integrations)
audit:readRead and stream audit entries
reports:readRun and retrieve reports, including Clery roll-ups
webhooks:manageCreate and manage webhook subscriptions

REF-C2 REST API

Base URL https://api.onepointe.ai/v1. JSON in, JSON out; cursor pagination via next_cursor; idempotency keys honored on all POST requests. Rate limit: 600 requests per minute per tenant, with 429 responses carrying Retry-After. Sandbox and production use separate credentials and hosts.

MethodPathDescription
GET/casesList cases; filter by module, status, owner, updated_since
GET/cases/{id}Retrieve a case with its section summaries
POST/casesCreate a staff-originated case shell
PATCH/cases/{id}/statusTransition status within the fixed lifecycle
GET/cases/{id}/timelineChronology events, including draft-state AI entries
POST/intakesSubmit an intake programmatically
GET/audit-entriesQuery the audit log; filter by case, actor, action
POST/exportsRequest a case assembly, report, or log export
GET/reports/cleryClery roll-up for a date range, CSA-submission ready
curl https://api.onepointe.ai/v1/cases/CAS-2026-0418 \ -H "Authorization: Bearer $ONEPOINTE_TOKEN" { "id": "CAS-2026-0418", "module": "title_ix", "status": "investigation", "owner": { "id": "usr_reyes_j", "level": "L4" }, "parties": 3, "evidence_items": 6, "timeline_events": 11, "sla": { "state": "on_track", "next_deadline": "2026-04-24" }, "created": "2026-04-18T16:12:36Z" }

The full reference with request and response schemas for every endpoint ships with the public library in Q3 2026; customers can request early access through their implementation engineer.

REF-C3 Webhooks

Subscriptions deliver signed JSON to your endpoint. Signatures are HMAC-SHA256 in the X-OnePointe-Signature header; deliveries retry with exponential backoff for 24 hours; event payloads carry object references, never full record content, so your receiver fetches details through the API under its own scopes.

EventFires when
intake.receivedA public or programmatic intake is submitted
case.createdA case is opened from an intake or a quick action
case.status_changedA lifecycle transition occurs
case.assignedOwnership or team assignment changes
interim_measure.approvedAn L4+ approves proposed interim measures
hearing.scheduledA hearing or pre-hearing conference is set
document.generatedA standard document is drafted and enters review
ai.draft.generatedAn AI feature produces a draft for human review
export.completedA requested export is ready for download
{ "event": "case.status_changed", "ts": "2026-04-21T14:05:12Z", "tenant": "lwd", "object": { "type": "Case", "id": "CAS-2026-0418" }, "change": { "from": "in_review", "to": "investigation", "actor": "usr_reyes_j" }, "audit_ref": "AUD-2026-117761" }

REF-C4 Audit export & SIEM

Planned: the audit log will stream to Splunk (HEC), Microsoft Sentinel, and Sumo Logic, or as NDJSON to an S3 bucket you control. Export is not available in pre-release. Every entry carries the hash chain, so downstream systems can verify continuity independently of OnePointe.

FieldMeaning
id · tsStable identifier and UTC timestamp
actorPerson or system, with permission level; AI actions carry on_behalf_of
actionNamespaced verb: case.viewed, evidence.linked, ai.draft.generated, export.completed
objectType and identifier of the record acted on, with its case reference
prev_hash · hashChain commitment: each entry commits to its predecessor

Chain verification tooling ships with the export: a single command replays a range and confirms no entry was altered, inserted, or removed. This is the property the marketing site summarizes as append-only, cryptographically chained, replicated across regions.

Evaluating OnePointe? The security packet contains the documentation a CIO review needs, and the walkthrough includes a live look at every surface above. For anything specific, write to hello@onepointe.ai.

CompanyPortland, Oregon

Case management you can stand behind.

OnePointe builds software for the institutions that handle civil-rights, conduct, and safety cases - work that cannot fail quietly. We build it from inside the practitioner's chair, not from across a sales table.

Join us →See the platform →

Our purpose

We give the people who handle the hardest cases at a school or campus a system worthy of the work: one front door for every report, one case file, and one defensible record - so that no case fails quietly.

We build from the chair

Our founder held the coordinator and dean seats for more than a decade. The product is designed by people who have sat across from a complainant and read a hearing officer's draft at midnight - not by people who have only read about it.

The record is the product

Every screen exists to make the file defensible and the access auditable. Who saw what, when, and why is answered by an append-only trail, not reconstructed after the fact.

Intelligence that assists

The AI drafts, flags, summarizes, and suggests. Decisions stay with named humans, on the record.

One piece of the system

OnePointe works alongside your registrar, your counsel, and your existing process. We integrate with the systems your institution already relies on rather than asking you to abandon them.

What we hold

The decisions we made on principle, and will keep.

01

The AI will not decide.

It drafts, flags, summarizes, and suggests. It never assigns credibility, recommends an outcome, or finalizes a record without a named human reviewing every consequential step. The audit trail says who. Always.

02

We will not train on your data.

Not for other institutions, not for partners, not for marketing. The models that power OnePointe are evaluated on synthetic and licensed data. Your cases stay your cases.

03

Pricing stays in the open.

Per student, per year, published. Founding-partner pricing locked for the life of the relationship. No hidden fees, no surprise renewals, no charges for asking a question.

04

US-hosted, tenant-isolated.

Tenant isolation enforced at the database layer by row-level security, customer-managed keys available under a custom contract. We do not subprocess Customer Data to non-US infrastructure.

05

The front door comes first.

The person reaching the intake form may be having the worst week of their year. We hold that screen to the highest accessibility bar we apply, because the calmer that door is, the better the rest of the case goes.

06

We hire slowly, on purpose.

A small team, built deliberately, that answers every message itself. Several of our roles are reserved for people who have held the coordinator or investigator seat inside an institution.

The bench we are building

We grow deliberately rather than quickly. When a seat does open, several are reserved for people who have held the coordinator or investigator seat inside an institution.

How we hire →

Governance

OnePointe Technologies is affiliated with Fractional Coordinator, Inc., the civil-rights compliance firm that recommends and deploys OnePointe as its case management system.

Legal entityOnePointe Technologies
IncorporationDelaware C-corporation
HeadquartersOregon Square, Portland, Oregon
Founded2026
HostingUnited States · tenant-isolated

General inquiries: hello@onepointe.ai · Press: press@onepointe.ai · Fractional Coordinator

Work with us

Want to help us build the future of this work?

See the platform with a former coordinator or dean of students - or, if you want to build it with us, look at the roles we are hiring for.

Book a walkthrough Join us ▸
CareersPortland, Oregon · Remote US

We hire slowly, on purpose.

OnePointe is a small team building deliberately, headquartered at Oregon Square in Portland. We are not hiring at the moment, though that changes. Resumes are optional: work samples and references from people you have actually shipped with carry the day.

No open roles todayHQ · Portland, OREngineering · remote US, quarterly Portland weeks

Mission

Give the people who handle civil-rights and safety cases a system worthy of the work - one front door, one record, one defensible trail - so that no case fails quietly.

Vision

A future where every report at every institution is met with care, consistency, and a record that holds up to anyone who asks.

Objectives

  • Make the defensible way the easy way for every coordinator.
  • Keep AI advisory - it drafts, it never decides.
  • Earn trust in the open: published pricing, a public changelog, real audit trails.

Life on the team

We work out of WeWork at Oregon Square in Portland, with WeWork access for the remote team nationwide. The environment is part of the offer:

☕Unlimited kombucha on tapand good coffee, always
🧘Weekly yogaon the calendar, on us
🍽Team lunchestogether, regularly
🏢WeWork everywherePortland HQ + nationwide access
💓Full health, dental & visioncovered for you
📈Meaningful equityyou own a piece of it
🌴Genuine PTOrest that is actually taken
📚Learning budgetconferences, courses, books
✈Quarterly Portland weeksthe whole team, in person

Open roles

No open positions at this time.

We are not actively hiring right now, but we grow deliberately and that changes. If you believe in this work and want to be considered when a role opens, we would still like to hear from you.

Introduce yourself →

How we hire

Any take-home work is kept short and scoped. Engineering is full-remote with quarterly in-person weeks in Portland; our administrative staff work in person at our Oregon Square headquarters.

If your role is not listed

Write to careers@onepointe.ai with a paragraph about what you would want to build here. We answer every message ourselves.

Resource libraryField notes & practitioner writing

Writing for the people doing the work.

Field notes from coordinators and deans, regulatory briefs, practice templates, and the trust documents your CIO will ask for. The full library opens publicly in Q3 2026; several pieces are available today.

Featured · Practitioner's guide

Evaluating case management platforms.

The criteria that matter, the questions to put to any vendor, and how to score the answers. Written for the coordinator building the procurement file, not the vendor selling into it.

GUIDE-01 · In preparation · publishing with the library

Get notified at launch
Trust Updated June 2026The security packet Six documents for your CIO's review: HECVAT, MSA, FERPA addendum, DPA, subprocessors, IR plan. Available nowRequest → Trust May 2026WCAG 2.1 AA conformance summary The public accessibility statement: what was audited, what conforms, and the remediation roadmap for what does not yet. Available nowRead → Product June 2026Platform documentation Architecture, the data model, permissions, the AI layer, and the full developer surface: API, webhooks, SIEM. Available nowOpen → Product Updated weeklyRelease changelog Every release, every security-relevant change, every deprecation. Written for the people who own the audit when it arrives. Available nowRead → Letter June 2026Notes from our CEO On why OnePointe exists, what it will and will not do, and what the year ahead holds. Written by someone who held the job. Available nowRead → Live session Booking nowA walkthrough with a peer Thirty minutes with a former Title IX coordinator or dean of students. Bring sanitized scenarios; we model them live. OngoingBook →
Field note Coming Q3 2026The first 72 hours The intake decisions that quietly decide the case, and how to make them the same way every time. In preparationQ3 2026
Field note Coming Q3 2026One record Why unified case files survive OCR review, and fragmented ones do not. With the reassembly math that proves it. In preparationQ3 2026
Field note Coming Q3 2026The calm front door Designing intake for the worst week of someone's semester: one question, a quick exit, and nothing that reads like a form. In preparationQ3 2026
Regulatory brief Coming Q3 2026What changed, operationally A running series on rule changes and enforcement shifts, focused on what a coordinator must do differently on Monday. In preparationSeries · Q3 2026
Template Coming Q3 2026Notice language that holds up Notices of investigation, outcome letters, and interim-measure language drafted to survive review by the people who ask hard questions. In preparationQ3 2026
Template Coming Q3 2026Chronology formats & hearing checklists The document structures a defensible case file is built from, in formats your team can adopt tomorrow. In preparationQ3 2026

If you would like to write for the library, or to be notified when it launches, write to hello@onepointe.ai. We answer every message ourselves.

Who we serve

Government & public agencies.

One system for the public bodies that investigate civil-rights, discrimination, and conduct complaints - and have to show their work. The obligations differ from a campus. The standard does not: one case file, one audit trail, one defensible record for every matter.

6+
civil-rights and workplace frameworks on one record - Title VI, Title VII, ADA, EEO, public conduct, and grievance
1
case file, one audit trail, one dashboard - from complaint to resolution, defensible under public scrutiny
US
hosted and tenant-isolated, never trained on your data - built for records that face open-records and oversight review

Find your fit

Built for the public sector. Tailored to each.

Three common settings - configured to the obligations you actually carry.

State & regional agencies

Departments & authorities

Civil-rights, human-services, and licensing bodies that take complaints from the public and from staff, with reporting that rolls up across programs.

County & municipal government

Local government & HR

One front door for resident and employee complaints across departments, with a defensible trail a council or commission can review.

Public authorities & special districts

Transit, housing, health & utilities

Federal-funding recipients managing Title VI and grievance obligations, with per-program configuration under one shared record.

Book a walkthroughExplore by role ▸

What public agencies ask us first

Public records. An append-only audit trail and record handling built for open-records requests, retention schedules, and oversight review.

Title VI & federal funding. Complaint intake and grievance procedures aligned to Title VI obligations for recipients of federal financial assistance.

Workforce & EEO. Title VII and ADA workplace investigations for public employers, on the same record as public-facing complaints - who did what, and when.

Our approach

We stand it up with you - we do not hand you a login.

01

We build from the chair

Designed by former coordinators and investigators, not vendors. We start from how a matter actually moves through your organization.

02

One record, end to end

Every report enters the same way, lives in one case file, and leaves an append-only audit trail. Answered, not reconstructed.

03

Intelligence that assists

The AI drafts, flags, and summarizes. It never assigns credibility or finalizes a record without a named human on every step.

04

Configured, migrated, supported

We shape it to your obligations, bring your open matters across, and go live with a practitioner reachable directly.

Insights & resources

Writing for the field, from the field.

Newsletter

The Gazette

Practitioner writing and product notes on civil-rights compliance, casework, and the record. No marketing.

Read the newsroom →Library

Guides & playbooks

Framework guides, implementation checklists, and templates for investigators, coordinators, and compliance offices.

Browse resources →Trust

Security & the record

How the audit trail, tenant isolation, and no-training-on-your-data commitments actually work.

See security →

Ready to talk?

Walk through your workflow.

Thirty minutes with a former investigator or coordinator, run on your own sanitized scenarios - public-facing or workforce.

Book a walkthroughTalk to sales ▸

Who we serve

Employers & organizations.

One system for the organizations that run workplace investigations and conduct matters outside education - and need a record that holds up. The setting differs. The standard does not: one case file, one audit trail, one defensible record from intake to close.

6+
workplace and conduct frameworks on one record - Title VII, harassment & discrimination, ADA, ethics, retaliation, and grievance
1
case file, one audit trail, one dashboard - from report to resolution, defensible under legal review
US
hosted and tenant-isolated, never trained on your data - built for matters that may reach counsel or a regulator

Find your fit

Built for the workplace. Tailored to each.

Three common settings - configured to the obligations you actually carry.

Employers & HR teams

Workplace investigations

Harassment, discrimination, and retaliation matters handled on one record, with interview workflows and a trail your counsel can stand behind.

Nonprofits & member organizations

Conduct & grievance

Member conduct, volunteer safety, and grievance processes with a calm front door and a defensible record - sized to lean teams.

Regulated & safety-sensitive sectors

Healthcare, finance & beyond

Ethics, whistleblower, and conduct casework with the isolation, retention, and audit standards regulated environments require.

Book a walkthroughExplore by role ▸

What organizations ask us first

Workplace investigations. Intake, evidence handling, calibrated interview questions, and a report drafted from the record - the finding stays with a named investigator.

Counsel-ready records. An append-only audit trail and chain of custody built to withstand review by the people who ask hard questions.

Confidentiality & access. Tenant isolation, customer-managed keys, and role-based access - your matters stay yours, and we never train on them.

Our approach

We stand it up with you - we do not hand you a login.

01

We build from the chair

Designed by former coordinators and investigators, not vendors. We start from how a matter actually moves through your organization.

02

One record, end to end

Every report enters the same way, lives in one case file, and leaves an append-only audit trail. Answered, not reconstructed.

03

Intelligence that assists

The AI drafts, flags, and summarizes. It never assigns credibility or finalizes a record without a named human on every step.

04

Configured, migrated, supported

We shape it to your obligations, bring your open matters across, and go live with a practitioner reachable directly.

Insights & resources

Writing for the field, from the field.

Newsletter

The Gazette

Practitioner writing and product notes on civil-rights compliance, casework, and the record. No marketing.

Read the newsroom →Library

Guides & playbooks

Framework guides, implementation checklists, and templates for investigators, coordinators, and compliance offices.

Browse resources →Trust

Security & the record

How the audit trail, tenant isolation, and no-training-on-your-data commitments actually work.

See security →

Ready to talk?

Walk through your workflow.

Thirty minutes with a former investigator, run on your own sanitized scenarios - whatever your setting.

Book a walkthroughTalk to sales ▸

Who we serve

Higher education & PK-12.

One system for the people who handle civil-rights, conduct, and safety cases - on campus and in the district. The workflows differ. The standard does not: one case file, one audit trail, one dashboard.

6+
civil-rights and conduct frameworks on one record - Title IX, Title VI, Title VII, Conduct, ADA / 504, BIT / CARE
1
case file, one audit trail, one dashboard - from intake to resolution, defensible at every step
US
hosted and tenant-isolated, and never trained on your data - the same standard for every institution

Find your fit

Built for both. Tailored to each.

Choose your setting to see how OnePointe works where you are.

Higher education

A civil rights case rarely stays in one office. OnePointe runs each framework as its own module over one shared case file, so a matter moves between conduct, Title IX, BIT, and general counsel without ever leaving the record.

Universities & colleges

Four-year, public & private

The full framework set, hearing management, cross-office coordination, and Clery-aware reporting. Built for a Vice President's morning.

Community colleges

Two-year & technical

Sized for institutions where the same person wears five hats. Pricing scales to enrollment; no dedicated case manager required.

Systems & consortia

Multi-campus & state systems

Per-campus configuration under system-level reporting, with the isolation a shared-services model requires.

From the field · higher education

“For the first time, conduct, Title IX, and BIT are looking at the same case file.”

- Dean of Students · four-year public university

Book a walkthroughExplore by role ▸

What higher ed asks us first

Clery and FERPA. De-identified pattern reporting, education-record handling, and retention rules configured to your obligations.

Hearings. Advisor access, evidence exchange, and a defensible record of every step from notice through determination and appeal.

Coordination. One case file across Title IX, conduct, BIT, and CARE - and the audit trail says who did what, and when.

Our approach · both settings

We stand it up with you - we do not hand you a login.

01

We build from the chair

Designed by former coordinators and deans, not vendors. We start from how a matter actually moves through your institution.

02

One record, end to end

Every report enters the same way, lives in one case file, and leaves an append-only audit trail. Answered, not reconstructed.

03

Intelligence that assists

The AI drafts, flags, and summarizes. It never assigns credibility or finalizes a record without a named human on every step.

04

Configured, migrated, supported

We shape it to your obligations, bring your open matters across, and go live with a practitioner reachable directly.

Insights & resources

Writing for the field, from the field.

Newsletter

The Gazette

Practitioner writing and product notes on civil-rights compliance, casework, and the record. No marketing.

Read the newsroom → Library

Guides & playbooks

Framework guides, implementation checklists, and templates for coordinators, deans, and district offices.

Browse resources → Trust

Security & the record

How the audit trail, tenant isolation, and no-training-on-your-data commitments actually work.

See security →

Ready to talk?

Walk through your workflow.

Thirty minutes with a former coordinator, dean, or district practitioner, run on your own sanitized scenarios - higher ed or PK-12.

Book a walkthrough Talk to sales ▸
CustomersBy role

One platform. Many seats.

A civil rights case touches a lot of people - across institutions and organizations, and on both sides of the matter. Everyone who touches a case gets a view sized to their work and a permission boundary that matches their responsibility. Least privilege by default, and every access on the record.

Run the case → Support the people → Hold the record → Lead the institution → The people it's about →

01 Run the case

The people who move a matter from intake to resolution and produce the record.

Title IX / Civil Rights CoordinatorBoth

Run intake, assign investigators, manage hearings, and produce the record. The platform tours your morning the way you would: open queue, then schedule, then anything overdue.

How OnePointe supports this roleOnePointe gives the coordinator one queue across every framework, auto-assigns investigators by conflict and caseload, and tracks each regulatory clock. It drafts notices and outcome letters from the case file, flags a deadline before it slips, schedules follow-up email to the parties at each step, and produces the complete record on demand.

Deputy Coordinator / InvestigatorBoth

Conduct interviews, link evidence, and draft findings - scoped to the matters assigned to you, with drafted questions to review before any meeting.

How OnePointe supports this roleThe investigation workspace holds interviews, evidence, and a working findings draft in one place. OnePointe links every exhibit to the allegation it supports, transcribes and summarizes interviews, drafts the findings for the investigator to edit rather than accept, and schedules the next interview with reminders sent automatically.

Dean of StudentsHigher ed

Coordinate across conduct, Title IX, BIT, and CARE without switching tools. One case file, one trail, every module on one dashboard.

How OnePointe supports this roleOne dashboard spans conduct, Title IX, BIT, and CARE, so the dean sees every open matter without switching tools. OnePointe surfaces what is overdue, routes each referral to the right office in real time, schedules the meetings that follow, and rolls individual cases up to a weekly briefing.

Director of Student ConductHigher ed

Run conduct cases with the same defensible record as Title IX. Same audit trail, same export, same standard.

How OnePointe supports this roleConduct cases run on the same defensible record as Title IX, with the same audit trail, templates, and deadlines. OnePointe schedules hearings, sends notice and reminder email to every party, assembles the hearing packet, and captures the decision and its rationale on the record.

Hearing Officer / Decision-makerBoth

Time-boxed access to exactly the record needed to decide, and nothing more - with every view logged.

How OnePointe supports this roleOnePointe grants time-boxed access to exactly the record needed to decide, and nothing else. It presents the evidence in a clean reader, captures the rationale as the decision is written, closes access the moment it is filed, and logs every view along the way.

Behavior / Discipline LeadPK-12

Run discipline and civil-rights matters through restorative and formal paths, with the record to show what was offered and done.

How OnePointe supports this roleRestorative and formal tracks run side by side with the civil-rights lens built in. OnePointe flags when a discipline matter may also be a Title VI or 504 issue, schedules re-entry and family meetings with follow-up email, and keeps every step defensible without added runtime.

02 Support the people

The people who care for those involved and follow through on supportive measures.

BIT / CARE / Threat Assessment ChairBoth

A care-team view designed for the work, with de-identified reporting that protects student privacy while supporting the team's mandate.

How OnePointe supports this roleFor a BIT, CARE, or threat-assessment team, OnePointe provides a shared care-team space where every report, meeting note, risk level, and action item lives together. It does this by structuring each meeting around a repeatable rubric with de-identified reporting, and it runs with no delay: notes and risk levels update in real time. The system schedules follow-up email to the parties, sets review dates, and surfaces rising patterns across cases so a growing concern is never missed.

Case Manager / AdvocateBoth

Track supportive measures and follow-through, documented, so nothing offered quietly disappears.

How OnePointe supports this roleSupportive measures and follow-through are tracked to completion. OnePointe schedules each check-in, sends follow-up email to the parties on a cadence you set, and documents every measure offered and delivered so nothing quietly falls off.

Counselor / Social WorkerBoth

A support role with privacy boundaries that fit - visible where it helps, walled where it must be.

How OnePointe supports this roleA support role with privacy boundaries that fit: visible where the student needs help, walled off from the investigative file. OnePointe logs supportive contact without exposing case detail and flags an urgent concern to the care team the moment it is entered.

Advisor / Support personBoth

Scoped access to participate in a matter without seeing the whole file.

How OnePointe supports this roleScoped access to participate in a matter without seeing the whole file. OnePointe shares only the documents the advisor is entitled to, on the timeline the coordinator controls, and records every view on the audit trail.

03 Hold the record

The people who make sure the file is defensible, compliant, and secure.

General CounselBoth

Privileged communications, legal hold, retention overrides, and the kind of audit log that holds up in front of the people who ask hard questions.

How OnePointe supports this rolePrivileged communications, legal holds, and retention overrides live in one governed system. OnePointe segregates privileged material, freezes records under hold, and produces a complete, timestamped chain of custody ready for litigation.

Compliance / Clery OfficerHigher ed

Obligations tracked, reporting produced, and evidence of a consistent process - without a spreadsheet in sight.

How OnePointe supports this roleObligations are tracked and reporting is produced from the same data the front line uses. OnePointe maps incidents to Clery categories, generates the annual report, and evidences a consistent, defensible process end to end.

ADA / Section 504 CoordinatorBoth

Accommodation and access cases handled with the same defensible record as every other framework.

How OnePointe supports this roleAccommodation and access cases carry the same defensible record as every other matter. OnePointe tracks each interactive-process step, schedules follow-up email with the requester, and documents every decision and the reason behind it.

Human ResourcesBoth

Title VII and employee matters, kept separate from student records with their own access boundary.

How OnePointe supports this roleTitle VII and employee matters stay separate from student records, with their own permissions and retention. OnePointe drafts investigation summaries, schedules interviews with automatic reminders, and holds the employee file to its own rules.

IT / Information SecurityBoth

Immutable hash-chained audit and row-level tenant isolation ship today. SAML and OIDC, SCIM, SIEM export, and customer-managed keys are planned and not available in pre-release. The packet your CIO needs lives at request the security packet.

How OnePointe supports this roleOnePointe runs tenant-isolated and SSO-gated, encrypted in transit and at rest, with every action logged. IT provisions and de-provisions by role, reviews the access log, and never needs to see case content to keep the system secure.

04 Lead the institution

The people who need the pattern and the briefing without becoming daily operators.

VP Student Affairs / ProvostHigher ed

Institution-level reporting and trend analysis, with the briefing materials a senior leader needs.

How OnePointe supports this roleInstitution-level reporting and trend analysis, with the briefing already written. OnePointe rolls every office into one view, shows where volume and risk are rising, and drafts the leadership summary for review.

Chief of StaffBoth

The one-page answer - trends, overdue items, and what leadership needs to know this week.

How OnePointe supports this roleThe one-page answer, trends, overdue items, and what leadership needs to know, generated on demand. OnePointe assembles the brief, flags anything past deadline, and keeps the narrative consistent across cabinet.

Superintendent's OfficePK-12

A district-wide view across every building, so the office can answer “what happened, and what did we do.”

How OnePointe supports this roleA district-wide view across every building, so the office can answer the board and the state with confidence. OnePointe aggregates each school's record, standardizes reporting, and flags the buildings that need attention.

Principal / Assistant PrincipalPK-12

The building's dashboard for the day, rolled up to the district record automatically.

How OnePointe supports this roleThe building's dashboard for the day, rolled up to the district record automatically. OnePointe shows today's incidents, schedules parent and re-entry meetings with follow-up email, and keeps discipline defensible.

05 The people a case is about

Not only staff. The front door is built for the people on the other side of the matter - often on the worst week of their year.

ReporterBoth

A calm front door from any device, one question at a time, with an emergency path surfaced on every screen and a quick exit when it's needed.

How OnePointe supports this roleA calm front door from any device, one question at a time, with an emergency off-ramp. OnePointe accepts a report named or anonymous, routes it to the right office instantly, and confirms receipt.

ComplainantBoth

Status by secure code, supportive measures, and a process explained in plain language rather than assumed.

How OnePointe supports this roleStatus by secure code, supportive measures, and a process explained in plain language. OnePointe updates the complainant at each step, offers measures without a login, and keeps them informed by scheduled email.

RespondentBoth

Notice, the case to answer, and a fair, documented process - the record protects everyone, not only the institution.

How OnePointe supports this roleNotice, the case to answer, and a fair, documented process, with the same record on both sides. OnePointe delivers notice, shares the evidence they are entitled to, and tracks every deadline for the response.

Parent / GuardianPK-12

File and check status on behalf of a student, in language a family can actually use.

How OnePointe supports this roleFile and check status on behalf of a student, in language a family can follow. OnePointe accepts a report from a parent, confirms it, and shares status updates by secure code.

See your seat

Walk through your view.

Tell us your role and we will show you the exact screen you would live in - run by a former practitioner who has sat in it.

Book a walkthrough By segment ▸
LetterFrom the founder
Notes from our CEO · June 2026

On why this exists, and what it will never do.

Albert Roberson · Founder & CEO

I spent eleven years doing this work before I built the software for it. I sat across from people on the worst day of their year and asked them to trust a process. What I did not have was a system worthy of that trust. The case lived in four places. The record was a folder of spreadsheets and a thread of emails. When the audit arrived, and it always arrived, the work was sound but the trail was not.

OnePointe exists to close that gap. One front door for every report. One case file. One audit trail that writes itself down as the work happens, cited to the record. Title IX, Title VI, conduct, accessibility, and behavioral intervention run on the same standard, because the standard does not change when the statute does.

There is a line this company will not cross. The software drafts, flags, and summarizes. It never decides. A determination belongs to a trained human being who is accountable for it, and it will stay there. An automated system that quietly makes the call is not a convenience. It is a liability wearing the costume of one. We build tools that make the practitioner faster and the record cleaner, and then we step back.

We also believe pricing should be something you can read. Our numbers are published. Our contracts are short. An institution should not need three sales calls to learn what a thing costs. Trust is not a slogan here. It is operationalized, in the product and in the terms.

On the year ahead, we are adding depth rather than surface. More of the frameworks institutions cannot afford to mishandle. Better intelligence on the same clean record. And the same promise, unchanged, that your data is yours, exportable in full, on the day you ask for it.

I built this for the person I used to be, working late, holding a case that mattered, wishing the system underneath the work was as careful as the work itself. What you are given, you give forward. This is one way I know how to do that.

Albert Roberson
Founder & CEO, OnePointe

Questions about anything here? Write to hello@onepointe.ai. We read and answer every message ourselves.

Page not foundError 404

This page could not be found.

The link may be out of date, or the address may have a typo. Nothing is broken on your end. Here are the places people usually mean to go.

Back to home Book a walkthrough
SecurityInfrastructure, hosting, and data handling. Who it is forInstitutions and organizations we serve. ResourcesDocumentation, guides, and downloads. ContactReach a person, not a queue.