# 1Password Transparency issue **URL:** https://discuss.privacyguides.net/t/1password-transparency-issue/40725 **Category:** General **Created:** 2026-09-14T16:56:27Z **Posts:** 14 ## Post 1 by @ph00lt0 — 2026-09-14T16:56:27Z [Support page](https://support.1password.com/security-assessments/) states that: > As part of 1Password’s ongoing commitment to responsible transparency, security, and compliance, we’re centralizing the distribution of our penetration testing reports. Effective November 3, 2025, all annual pentest reports will be available through the **[1Password Trust Center](https://trust.1password.io/)**. “Available” and “trust” are interesting words here because it seems they do not have much confidence in the contents of the reports. When you want to get access 1Password demands that you sign a NDA. Which is a bit funny as then I am not able to tell after whether you can rely on that report. Aside from that given the trust page only allows a “work” email (whatever that may be?), it seems inaccessible to general users. --- ## Post 2 by @not-wittingly — 2026-09-15T06:39:41Z Sketchy as. --- ## Post 3 by @blibly — 2026-09-15T07:02:54Z Is there any world or mindset where hiding this behind an NDA makes sense? Cybercriminals probably aren’t going to care about an NDA. I feel like I don’t even have to say that. All I could see this achieving is making 1Password look bad. --- ## Post 4 by @Sorge — 2026-09-15T08:14:21Z > [@ph00lt0](#): > > 1Password demands that you sign a NDA The NDA comes from SafeBase, the platform 1Password [moved to](https://www.1password.community/lounge-50/as-a-1password-user-how-to-access-security-audits-24087). It’s B2B tooling for enterprise security questionnaires, and the NDA is standard there for all companies using it, I believe. That is just not something we’re used to seeing in consumer and opensource world, but that’s the B2B way. That explains wording (trust center, work email) too, that’s how people speak in enterprise. I think you should not worry about their confidence, they are fine. --- ## Post 5 by @blibly — 2026-09-15T08:51:34Z > [@Sorge](#): > > The NDA comes from SafeBase, the platform 1Password [moved to](https://www.1password.community/lounge-50/as-a-1password-user-how-to-access-security-audits-24087). It’s B2B tooling for enterprise security questionnaires Could you explain what this means? --- ## Post 6 by @Sorge — 2026-09-15T08:58:25Z What exactly? I do not know much about the problems they solve, but generally, from their parent company’s website, it seems to be about helping companies meet compliance requirements: [https://drata.com/customers](https://drata.com/customers) 1pass is one of products they help to integrate --- ## Post 7 by @blibly — 2026-09-15T09:05:51Z Ok, I think I"m starting to get it. It sounds like that page wasn’t meant for us, but for security business dealings that are normally out of the public eye. --- ## Post 8 by @Sorge — 2026-09-15T09:10:19Z Oh, yes, that is what I meant to say. From a pure logic standpoint, it makes sense: if a 1Password regular user were interested in straightforward transparency, they would choose an open source password manager. 1Password is cool, but it is for a different audience, and the enterprise sector is a noticeable part of it. So language and customs there can feel odd for some users here. --- ## Post 9 by @blibly — 2026-09-15T09:12:58Z You sound somewhat familiar with enterprise dealings. --- ## Post 10 by @Sorge — 2026-09-15T09:19:26Z Not really. At my company we mostly work with small businesses. But back when we had a few enterprise clients, we laughed about the language so much. One of my favorites: the client operated in a market in the Middle East, and their manager said “changing situation” every time a normal guy would just say “war” --- ## Post 11 by @ph00lt0 — 2026-09-15T09:34:31Z I very much do worry about it as it is blocking us from reviewing 1password. --- ## Post 12 by @Sorge — 2026-09-15T09:35:13Z the thing is: they are fine even without this reviewing. But if something is blocking you: on linked forum they help people to go through the SafeBase ui --- ## Post 13 by @blibly — 2026-09-15T09:50:02Z Is there not another way to review them? --- ## Post 14 by @ph00lt0 — 2026-09-15T10:02:25Z They are closed source so not really.