One Identity uses cookies, web beacons, and tracking pixels on its website, and provides a separate Cookie Notice explaining how to opt out of certain tracking technologies.
This analysis describes what OneLogin's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Tracking technologies collect behavioral and device data that can be used for analytics and targeted marketing, and users should review the Cookie Notice and adjust their preferences to limit tracking they are not comfortable with.
Interpretive note: The policy references a separate Cookie Notice for full details; the completeness of disclosure and the operational configuration of the consent tool cannot be assessed from the privacy policy alone.
The updated policy discloses that OneLogin may record calls with consent and use AI to analyze call transcripts, chat conversations, and sales emails for multiple purposes including follow-up task identification, call summarization, sales analytics, communication effectiveness analysis, and forecast modeling. Under the revised terms, recorded call audio and video may be reviewed for employee training, monitoring, and coaching purposes. The policy also states that OneLogin will save chat and call conversation data to inform future interactions. These practices apply when you communicate with OneLogin via phone calls, chat, email, text, or other teleconference solutions. You should review the updated disclosure to understand how your communication data will be processed and retained.
View change record →The updated policy removes explicit language describing how OneLogin uses AI to analyze customer communications. Previously, the policy stated that call audio and video would be recorded with consent and analyzed using AI to identify follow-up tasks, summarize calls, and conduct sales analytics; that chatbot conversations would be analyzed and saved; and that sales emails would be analyzed to determine communication efficacy and forecast next steps. These specific AI analysis practices are no longer described in the updated policy. The revised language also narrows one stated data use purpose, changing 'answers or services you have asked or licensed' to 'services you have purchased.' No consumer opt-out mechanisms or alternative disclosures are provided in the change text.
View change record →The provision was simplified and deprioritized, removing specific purposes (analytics, advertising, personalization) and cookie consent tool management details, instead deferring to a separate Cookie Notice.
View full change record →By visiting the One Identity website, your browsing behavior, device information, and interactions may be tracked via cookies and pixels, some of which may be used for marketing or analytics purposes. You can manage your cookie preferences through the OneTrust cookie consent tool accessible on the website.
How other platforms handle this
At Ledger, earning and maintaining our users' trust is a top priority. That's why we are deeply committed not only to protecting your privacy and securing your personal data, but also to being fully transparent about how we handle it.
If you are located in the European Economic Area, Switzerland, or the United Kingdom, you have the right to access, correct, or erase your personal data; the right to restrict or object to our processing of your personal data; the right to data portability; and, where our processing is based on your...
We may display advertisements on our Services and those advertisements may be targeted to your interests based on your personal information. We may share your personal information with advertising partners for interest-based advertising purposes. You may opt out of interest-based advertising by visi...
Monitoring
OneLogin has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"We use cookies and similar tracking technologies (like web beacons and pixels) to access or store information. Specific information about how we use such technologies and how you can refuse certain cookies is set out in our Cookie Notice.— Excerpt from OneLogin's OneLogin Privacy Policy
1) REGULATORY LANDSCAPE: This provision engages the EU ePrivacy Directive (as implemented in member state law, commonly called the Cookie Law), GDPR consent requirements for non-essential cookies, the UK Privacy and Electronic Communications Regulations, and CCPA/CPRA provisions applicable to tracking technologies used for cross-context behavioral advertising. The relevant enforcement authorities are EU DPAs, the UK ICO, and the California Privacy Protection Agency. The use of tracking pixels and web beacons in addition to cookies may constitute 'sharing' personal information under CPRA if used for advertising purposes. 2) GOVERNANCE EXPOSURE: Medium. The policy references a separate Cookie Notice for details, which is standard practice but means the completeness of disclosure depends on that document. If non-essential cookies are deployed before user consent is obtained, this would constitute a violation of EU ePrivacy requirements. The OneTrust consent management platform is referenced in the page source, which suggests a consent mechanism is in place, but its configuration and pre-consent cookie blocking should be verified. 3) JURISDICTION FLAGS: EU/EEA and UK users require prior informed consent for non-essential cookies under applicable law. California users have rights related to opt-out of sale or sharing that may be triggered by advertising-related tracking pixels. Users in countries with strict cookie consent laws (Germany, France, Spain) may be subject to heightened local requirements beyond the policy's general disclosure. 4) CONTRACT AND VENDOR IMPLICATIONS: Enterprise customers embedding One Identity's services or integrations in their own platforms should assess whether One Identity's tracking technologies affect their own compliance obligations as data controllers. If One Identity cookies are deployed on customer-controlled environments, the customer may bear independent consent obligations. 5) COMPLIANCE CONSIDERATIONS: Legal teams should review the separate Cookie Notice for completeness and verify that the OneTrust implementation blocks non-essential cookies prior to consent. The cookie consent configuration should be audited for alignment with applicable law in key user jurisdictions. Any cookies shared with advertising or analytics partners should be evaluated under CPRA's sharing definition and GDPR's purpose limitation principle.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Monitor: 25 platforms + same-day alerts. No credit card required.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
Tracking technologies collect behavioral and device data that can be used for analytics and targeted marketing, and users should review the Cookie Notice and adjust their preferences to limit tracking they are not comfortable with.
By visiting the One Identity website, your browsing behavior, device information, and interactions may be tracked via cookies and pixels, some of which may be used for marketing or analytics purposes. You can manage your cookie preferences through the OneTrust cookie consent tool accessible on the website.
ConductAtlas has identified this type of provision across 28 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by OneLogin.