The core platform is hosted on infrastructure that meets an unparalleled broad set of international and industry-specific compliance standards, such as ISO 27001, HIPAA, FedRAMP, SOC 1 and SOC 2,PCI DSS Level 1 as well as country-specific standards including Australia CCSL, UK G-Cloud, and Singapore MTCS. The hosting was also the first to adopt the uniform international code of practice for cloud privacy, ISO/IEC 27018, which governs the processing of personal information by cloud service providers (CSPs).

All data transfers between the OBE and each mobile app uses HTTPS/SSL and URL signing for extra security.