OpenTeam policies

Policy library

Read the public policies for OpenTeam Portal, secure development and security testing, Google and Microsoft OAuth data, Amazon SP-API data, connected accounts, Team workspaces, and agent workflows.

General

2 policies
General

Privacy Policy

How OpenTeam handles Portal accounts, Team workspaces, connected accounts including Google and Microsoft OAuth data, operational data, security, retention, and user choices.

Updated May 28, 2026
Read policy
General

Terms of Service

Terms for using OpenTeam Portal, Team workspaces, Gateway-backed agents, connected services, content, outputs, and sensitive actions.

Updated May 18, 2026
Read policy

Security

4 policies
Security

Security & Development Policies

Security policy overview and current evidence status. Policy publication is separate from verified implementation or independent assessment.

Updated October 21, 2026
Read policy
Security

Secure Software Development Lifecycle Policy

SSDLC requirements for ownership, threat assessment, code review, security verification, release approval, and maintenance. Formal adoption evidence is not yet verified.

Updated October 21, 2026
Read policy
Security

Application Security Testing Policy

SAST and DAST methods, coverage, cadence, remediation, and report requirements. Completed execution reports are not yet verified.

Updated October 21, 2026
Read policy
Security

Independent Penetration Testing Policy

Independent assessment scope, annual cadence, written authorization, remediation, and retesting requirements. A completed third-party report is not yet verified.

Updated October 21, 2026
Read policy

Google

1 policy
Google

Google User Data Policy

Google OAuth data handling for Gmail, Drive, Calendar, Business Profile, Google Ads, Limited Use commitments, connector scopes, AI-assisted use, retention, revocation, and user controls.

Updated May 20, 2026
Read policy

Amazon

1 policy
Amazon

Amazon SP-API Security Policy

Amazon Selling Partner API data use, credential protection, logging, monitoring, incident response, and review summaries.

Updated May 16, 2026
Read policy