Built to be safe on your users' screens.
Onbixo runs a small script inside your app and stores as little as it can. Here is how we keep your data, and your users' data, protected - and how the runtime stays out of your app's way.
Least data, strict isolation, safe by default.
Encrypted in transit
The dashboard, the API, and the runtime all communicate over encrypted connections, so data moving between your users, your app, and Onbixo is protected end to end.
Your data stays yours
Every workspace is isolated from every other, so one customer can never see another's flows, users, or analytics. That separation is enforced on our servers, not just in the interface.
Hardened accounts
Passwords are securely hashed and never stored in plain text, sign-in is protected against brute-force attempts, and optional two-factor authentication is built in for every account.
Least-data by design
We collect only what onboarding needs, and no more. You decide what user information to send us, and you can request deletion of an end user's data at any time.
Roles & access control
Invite your team with owner, admin, editor, and viewer roles, so people only get the access their job needs. Ownership can be transferred, and access revoked, at any time.
Safe by default
The dashboard is protected by multiple layers of defense against common web attacks, so the account you build your flows in stays secure.
No hidden tracking
Onbixo is here to onboard your users, not follow them around the web. We do not track your users across other sites, and we never sell your data or theirs.
You stay in control
Your data is yours. You can delete an end user's information on request, and remove your account and everything in it whenever you choose - no support ticket required.
A script that never blocks your app.
The part that runs on your users' screens is a tiny, self-contained script that loads in the background and runs in isolation, so it cannot clash with your styles or your code. If our servers are ever slow, your flows fall back gracefully and your app keeps working - the runtime is built to degrade, never to break.
- Loads in the background, off your app's critical path
- Runs in isolation - no clashes with your styles or scripts
- Degrades gracefully - a slow server never blocks a flow, or your app
- Your plan and branding are enforced on our side, not the browser's
Privacy you can act on.
You control the end-user data you send us, and you can request deletion of a specific end user's data at any time. For the full detail, see our Privacy Policy, Data Processing Agreement, and GDPR statement. Have a specific question? Get in touch.
Onboarding you can trust in production.
A tiny runtime, strict isolation, and least-data by design. Free forever to start, live in one line.
Every plan includes OnbiAI - draft flows, targeting and audiences with AI