1password
Verified“Canadian-built, US-funded, US-cloud.”
- Valuation
- $6.8B
- Raised
- ~$920M
- Employees
- 1,000+
- Cloud
- AWS
26 = midpoint of Control 25 & Data 27
Sovereignty Quadrant
Control ↑ who owns & governs the company · Data → where your data lives. Every dot is a company — click to open it.
Every number below traces to 13 sourced facts across 9 independent sources, last verified 2026-06-12. 4 open questions hold confidence at 78% — they lower confidence, never the score.
Control ↑
Who legally and economically controls the company
Legal & Jurisdiction
35
Incorporated and operated in Canada (AgileBits Inc., Ontario; Toronto HQ) — a non-EU jurisdiction, but a trusted/adequacy-adjacent one, not the US. GDPR reaches its EU customers and the 1password.eu offering, but the controlling legal entity sits outside EU enforcement. Scored in the foreign-but-friendly band, above a US-incorporated firm and below any EU-incorporated one.
Why 35? 3 sourced facts · click to expand
Legal entity behind 1Password is AgileBits Inc., a Canadian corporation
Dun & Bradstreet — AgileBits Inc. profile · as of 2026-06-12
Registered/operating address is in Toronto, Ontario, Canada
Highperformr — 1Password company HQ · as of 2026-06-12
EU accounts are offered via a dedicated EU region (1password.eu), bringing those customers under GDPR/EU reach
1Password Support — 1Password in your region · as of 2026-06-12
Control & Ownership
15
Privately held; the economic majority is US venture/growth capital. ~$920M raised led by ICONIQ Growth with Accel, Tiger Global, Lightspeed and Salesforce Ventures — US-based investors who hold the bulk of preferred equity and economic upside. Founders/management are Canadian but the cap table is foreign-controlled on economics. No EU voting or economic anchor; scored in the foreign-control band.
Why 15? 3 sourced facts · click to expand
1Password has raised roughly $920M, the Series C led by ICONIQ Growth at a $6.8B valuation
TechCrunch — 1Password $620M Series C · as of 2026-06-12
Lead and major investors are US growth/VC firms (ICONIQ, Accel, Tiger Global, Lightspeed, Salesforce Ventures)
Dark Reading — 1Password Raises $620M Series C · as of 2026-06-12
Company remains privately held, with no announced IPO/exit at last reporting
TechCrunch — 1Password $620M Series C · as of 2026-06-12
Data →
Where your data lives and who can reach it
Data & Infrastructure
28
User data lives on AWS, a US hyperscaler. 1Password now offers a genuine EU region (data hosted in Frankfurt, eu-central-1) plus Canada and US regions, with data staying in the chosen region — materially better than US-only peers. But because the underlying provider is US-controlled AWS, the US CLOUD Act can reach the data even in Frankfurt, so it is not EU-sovereign infra. Default/legacy accounts are US-hosted. Scored in the 'EU region on a US hyperscaler' band.
Why 28? 4 sourced facts · click to expand
Core infrastructure runs on AWS, including AWS Nitro Enclaves
1Password Support — provisioning security · as of 2026-06-12
EU customer data can be hosted in Frankfurt, Germany (EU region)
1Password Blog — Device Trust coming to EMEA · as of 2026-06-12
Accounts can be created in US, Canada or EU regions; data stays in the chosen region
1Password Support — 1Password in your region · as of 2026-06-12
AWS EU regions remain subject to US CLOUD Act because the provider is US-controlled
Looming Tech — CLOUD Act and AWS EU regions · as of 2026-06-12
Operations & People
25
Headquartered and led from Toronto (CEO David Faugno; Jeff Shiner moved to Executive Chair in July 2025), remote-first across roughly five countries, with funding and reporting in USD. The center of gravity is North American (Canada-led, US capital), not EU. EMEA presence is growing but operations are not EU-centered; scored in the foreign-centered band, slightly above pure-US firms given the Canadian base.
Why 25? 3 sourced facts · click to expand
Headquarters and leadership are Toronto-based; David Faugno is CEO, Jeff Shiner Executive Chair
BetaKit — Shiner to Executive Chair, Faugno CEO · as of 2026-06-12
Remote-first workforce distributed across about five countries
Highperformr — 1Password company profile · as of 2026-06-12
Funding and valuation denominated in USD
TechCrunch — 1Password $620M Series C · as of 2026-06-12
Aligned to the EU Commission’s official Cloud Sovereignty Framework (SEAL, Jun 2026) →
What we don’t know
4 open questions — they lower confidence, never the score
- ?
What share of the cap table and voting control do Canadian founders/management retain versus US investors?
Could raise or lower the ownership score; current score assumes US economic majority based on $920M of US-led rounds.
- ?
Is the EU (Frankfurt) region exclusively AWS, or does any portion use an EU-owned provider?
If any sovereign/EU-owned infra were involved it would lift infra; current evidence points to AWS throughout.
- ?
Are pre-existing/legacy 1Password accounts migratable to the EU region, or locked to US hosting?
Affects how meaningful EU data residency is in practice for most existing users.
- ?
Exact current headcount and the geographic split of the workforce.
Refines the operations score; 'remote-first across ~5 countries' is approximate.
EU Cloud Sovereignty Framework lens
SEAL targets cloud providers; applied here as an analogous sovereignty mapping for a SaaS vendor, not a certification.
Strategic
Canadian-built but strategically dependent on US growth capital and a US hyperscaler; not EU-aligned.
Legal & jurisdictional
Non-EU (Canadian) entity, but a friendly adequacy-adjacent jurisdiction; GDPR reaches EU customers via 1password.eu.
Data & AI
Real EU data-residency option (Frankfurt), but on AWS — US CLOUD Act exposure remains; default is US.
Operational
Toronto HQ and Canadian leadership; remote-first, North-American-centered, USD-denominated. Not EU-operated.
Supply chain
Core dependency on AWS (US). No evidence of EU-sovereign infra suppliers.
Technological
Strong client-side end-to-end encryption (zero-knowledge), so even the host cannot read vault contents — mitigates, but does not remove, hosting-jurisdiction risk.
Security & compliance
GDPR-compliant, SOC 2, AWS Nitro Enclaves; mature security posture and EU residency offering.
Environmental sustainability
No specific, verified environmental/sovereignty data reviewed for this profile.
EU alternatives
Swiss-based (non-EU but strong privacy/adequacy), end-to-end encrypted, Proton-owned infra in Europe. Not EU-incorporated, but far more sovereign than US-VC-backed peers.
Built by Nord Security, headquartered in Lithuania (EU); EU-incorporated and EU-operated password manager.
German (EU) open-source password manager that can be fully self-hosted on EU infrastructure for maximum data sovereignty.
How the method works
Methodology v2 (provisional): the score is the midpoint of two axes — Control (who owns and governs the company) and Data (where your data lives and who can reach it). Each axis is scored only on verified evidence; unknowns reduce confidence, never the score. Every input below is sourced; the weights and judgments are open to challenge.
Spotted an error? Every claim is sourced — challenge it and we correct the record.
- 2026-06-12 — Initial golden profile, authored from primary sources (human + AI review).
Report Incorrect Data
Found an error in this company's profile? Help us improve our data by submitting a correction.
Verified 2026-06-12 · Human + AI joint review (sources independently checked) · Methodology