---
title: Partner program
description: Brand a live 1Security demo, share tracked referral links, see who opened them and for how long, and push every lead into your own Partner Portal or CRM.
icon: Handshake
---

# Partner program

The partner screens answer one question for a 1Security partner: **"Which of
my prospects looked at the demo, for how long, and are they in my pipeline
yet?"**

They appear in the navigation under **Partner** once 1Security has made your
organization a partner. Ask your 1Security contact if you do not see them.

## What You Can Achieve

<Cards>
  <Card
    title="A live demo under your brand"
    description="Prospects open a real 1Security tenant from your branded landing page: your logo, colours, fonts and copy, with you named as the presenter."
  />
  <Card
    title="Tracked links, not guesswork"
    description="Every link counts opens, unique visitors, form submissions, demos started, time spent in the demo, sign-ups and connected tenants."
  />
  <Card
    title="Leads in your own pipeline"
    description="Each lead opens a deal registration in the 1Security Partner Portal, and can also be sent to your CRM through a signed webhook."
  />
  <Card
    title="One brand for every document"
    description="The same brand kit fills your report templates for all client tenants and the invite emails you send."
  />
</Cards>

## Branding

**Partner → Branding** holds one brand kit for your whole organization:

- display name, legal name, website, support email and a meeting link (for
  example a Microsoft Bookings or Calendly page);
- a logo, a logo for dark backgrounds and a square mark (PNG, JPEG or WebP,
  up to 1 MB each);
- primary, accent, surface and text colours, checked for readable contrast;
- a heading font and a body font;
- links to your privacy notice and terms;
- how 1Security is mentioned: "with 1Security" or "powered by 1Security".

The **demo landing** below the kit sets what a referral link shows, in English
and Polish: headline, sub-headline, up to three proof points, the button
label, whether the form asks for company name and company size, and the
thank-you message. The live preview uses the same page your prospects see.

## Referral links

A referral link looks like `https://1security.ai/r/AbC12dEf34`. You can give a
link a readable name such as `/r/acme-security`. There are three kinds:

| Kind | Use | What the visitor gets |
| --- | --- | --- |
| Campaign | LinkedIn posts, newsletters, events | Your landing page, then the live demo |
| Personal | Created for each invite email | The same, with name and email filled in; expires after 30 days |
| Connect | A prospect ready to onboard | Your landing page, then Microsoft sign-in to connect their own tenant |

A visitor fills in name and email (company name and company size are
optional), accepts the privacy notice, and the live demo opens straight away.
No Microsoft account is needed to look around. While they explore, a slim bar
at the top shows your name, a **Talk to us** button and **Connect your tenant**.

Pause a link to stop it serving for a while; revoke it to stop it for good.
A paused, revoked or expired link shows a neutral "no longer active" page, and
the visit is still counted.

## Referrals screen

**Partner → Referrals** has five tabs:

- **Overview**: the funnel for the last 7, 30 or 90 days (opens, form
  submissions, demos, sign-ups, connected tenants) with the conversion
  between each step, a daily chart, leads by stage and deal registrations by
  status.
- **Links**: every link with its numbers. Copy it, show a QR code, edit the
  landing text for that link, pause or revoke it.
- **Leads**: one row per person, with company, company size, source link,
  stage, time spent in the demo and screens viewed. Open a lead for its full
  timeline: when the link was opened, the form sent, each demo screen, emails
  opened, sign-up and tenant connection.
- **Invites**: send a branded email with a personal link to up to 50 people
  at once, with an optional personal note. Every invite also gives you the link
  to copy, so you can send it from your own mailbox and still track it.
- **Sync**: the Partner Portal status and your webhooks.

Time in the demo only counts while the demo tab is visible, so a tab left open
in the background does not inflate it.

## Deal registration and ownership

Every new lead opens a **deal registration** in the 1Security Partner Portal.
Whether the lead is yours is confirmed or rejected there, by the same rules as
any other deal registration. Until then the lead shows **Registration pending**.

Signing up or connecting a tenant through your link does **not** give you
access to the client's data. Once the client has connected its tenant, the
client invites you from **1Security users**, and decides what you may see.

## Webhooks

Add a webhook to send leads to your CRM or PSA. Choose the events
(`lead.created`, `lead.updated`, `lead.stage_changed`, `demo.session_ended`;
none selected means all of them) and whether deliveries go out automatically,
only when you press **Sync**, or not at all. You can rename fields to match the
receiving system.

Each delivery is an HTTPS `POST` with a JSON body:

```json
{
  "id": "01J...",
  "event": "lead.created",
  "occurredAt": "2026-10-12T09:30:00.000Z",
  "lead": {
    "id": "01J...",
    "email": "jane.doe@example.com",
    "name": "Jane Doe",
    "company": "Example Ltd",
    "companySize": "51-250",
    "stage": "demo",
    "demoSeconds": 420,
    "screensViewed": 6,
    "sourceLinkName": "LinkedIn October",
    "registrationStatus": "pending"
  }
}
```

Verify that a delivery came from 1Security with the signing secret shown when
you created the webhook:

```js
const expected = crypto
  .createHmac('sha256', secret)
  .update(`${req.headers['x-1security-timestamp']}.${rawBody}`)
  .digest('hex');
const valid = req.headers['x-1security-signature'] === `sha256=${expected}`;
```

The `X-1Security-Delivery` and `Idempotency-Key` headers carry the delivery
id, so a retried delivery can be recognised. A failed delivery is retried after
1, 5, 30, 120, 720 and 1,440 minutes, then marked failed; you can retry it
from the delivery log.

## Privacy

The form names you and 1Security together as responsible for the data and
links both privacy notices. The consent text and its version are stored with
the lead. Visitor IP addresses are not stored. **Delete lead** removes the lead,
its timeline, its invites and its deal registration. Raw visit events are kept
for 18 months; the daily totals stay.