Security, privacy and support.
How OneAMS protects your association’s records, how data export works, and how we provide support.
Access based on role.
Role-based access
Each volunteer receives the access their role requires, and every action is authorized on the server.
Separation between associations
Each association's records are isolated. No association can access another association's data.
Access history
Role changes and invitations are logged, so an incoming board inherits a clear record of access rather than shared passwords.
Two-factor authentication
Any staff account can enable one-time codes at sign-in.
Traceable financial records.
Every payment is recorded against an invoice and posted to the ledger. Corrections preserve the original entry, and larger write-offs require approval from a second person.
Data ownership and privacy.
Export at any time
Download your core records (members, memberships, invoices, payments, gifts) whenever you need them, at no cost. Files, event registrations and full history are exported for you on request.
Personal data erasure
Erase an individual's personal details while retaining the financial records your association is required to keep.
Unsubscribes and bounces
Unsubscribed and bounced addresses are excluded from every campaign and follow-up.
What the AI may do and see.
The assistant works within the permissions of the person using it. Anything consequential is filed as an approval. For reports, OneAMS sends the question and the field list to the AI provider named in your governance pack, never member records; drafts use placeholders; the member assistant sends the asking member’s own summary and the content you approved. Usage has a daily limit and one setting pauses all AI.
The governance pack states all of this for your association, from its current settings, as a document for the board.
Support response targets.
Questions are answered by a person through our contact form. Founding associations receive direct support through migration and their first year.
| Priority | Examples | Response target |
|---|---|---|
| Critical | The service is down, data may be exposed, or payments or data are at risk | Acknowledged promptly, and within one business day |
| High | A core task is blocked and there is no workaround | Within one business day, with a workaround or the time of the next update |
| Normal | A question, a settings change or a minor bug | Within two business days |
These are operating targets. They are not a contractual uptime or resolution guarantee.
OneAMS is a new platform, and we do not claim certifications or recovery tests we have not completed. Export checks and a database restore comparison have been tested with sample data. Backup coverage and a full production restore test are in progress.