Partner programCopy Anchor Link

The partner screens answer one question for a 1Security partner: "Which of my prospects looked at the demo, for how long, and are they in my pipeline yet?"

They appear in the navigation under Partner once 1Security has made your organization a partner. Ask your 1Security contact if you do not see them.

What You Can AchieveCopy Anchor Link

BrandingCopy Anchor Link

Partner → Branding holds one brand kit for your whole organization:

• display name, legal name, website, support email and a meeting link (for example a Microsoft Bookings or Calendly page);
• a logo, a logo for dark backgrounds and a square mark (PNG, JPEG or WebP, up to 1 MB each);
• primary, accent, surface and text colours, checked for readable contrast;
• a heading font and a body font;
• links to your privacy notice and terms;
• how 1Security is mentioned: "with 1Security" or "powered by 1Security".

The demo landing below the kit sets what a referral link shows, in English and Polish: headline, sub-headline, up to three proof points, the button label, whether the form asks for company name and company size, and the thank-you message. The live preview uses the same page your prospects see.

Referral linksCopy Anchor Link

A referral link looks like https://1security.ai/r/AbC12dEf34. You can give a link a readable name such as /r/acme-security. There are three kinds:

A visitor fills in name and email (company name and company size are optional), accepts the privacy notice, and the live demo opens straight away. No Microsoft account is needed to look around. While they explore, a slim bar at the top shows your name, a Talk to us button and Connect your tenant.

Pause a link to stop it serving for a while; revoke it to stop it for good. A paused, revoked or expired link shows a neutral "no longer active" page, and the visit is still counted.

Referrals screenCopy Anchor Link

Partner → Referrals has five tabs:

• Overview: the funnel for the last 7, 30 or 90 days (opens, form submissions, demos, sign-ups, connected tenants) with the conversion between each step, a daily chart, leads by stage and deal registrations by status.
• Links: every link with its numbers. Copy it, show a QR code, edit the landing text for that link, pause or revoke it.
• Leads: one row per person, with company, company size, source link, stage, time spent in the demo and screens viewed. Open a lead for its full timeline: when the link was opened, the form sent, each demo screen, emails opened, sign-up and tenant connection.
• Invites: send a branded email with a personal link to up to 50 people at once, with an optional personal note. Every invite also gives you the link to copy, so you can send it from your own mailbox and still track it.
• Sync: the Partner Portal status and your webhooks.

Time in the demo only counts while the demo tab is visible, so a tab left open in the background does not inflate it.

Deal registration and ownershipCopy Anchor Link

Every new lead opens a deal registration in the 1Security Partner Portal. Whether the lead is yours is confirmed or rejected there, by the same rules as any other deal registration. Until then the lead shows Registration pending.

Signing up or connecting a tenant through your link does not give you access to the client's data. Once the client has connected its tenant, the client invites you from 1Security users, and decides what you may see.

WebhooksCopy Anchor Link

Add a webhook to send leads to your CRM or PSA. Choose the events (lead.created, lead.updated, lead.stage_changed, demo.session_ended; none selected means all of them) and whether deliveries go out automatically, only when you press Sync, or not at all. You can rename fields to match the receiving system.

Each delivery is an HTTPS POST with a JSON body:

{
  "id": "01J...",
  "event": "lead.created",
  "occurredAt": "2026-10-12T09:30:00.000Z",
  "lead": {
    "id": "01J...",
    "email": "jane.doe@example.com",
    "name": "Jane Doe",
    "company": "Example Ltd",
    "companySize": "51-250",
    "stage": "demo",
    "demoSeconds": 420,
    "screensViewed": 6,
    "sourceLinkName": "LinkedIn October",
    "registrationStatus": "pending"
  }
}

Verify that a delivery came from 1Security with the signing secret shown when you created the webhook:

const expected = crypto
  .createHmac('sha256', secret)
  .update(`${req.headers['x-1security-timestamp']}.${rawBody}`)
  .digest('hex');
const valid = req.headers['x-1security-signature'] === `sha256=${expected}`;

The X-1Security-Delivery and Idempotency-Key headers carry the delivery id, so a retried delivery can be recognised. A failed delivery is retried after 1, 5, 30, 120, 720 and 1,440 minutes, then marked failed; you can retry it from the delivery log.

PrivacyCopy Anchor Link

The form names you and 1Security together as responsible for the data and links both privacy notices. The consent text and its version are stored with the lead. Visitor IP addresses are not stored. Delete lead removes the lead, its timeline, its invites and its deal registration. Raw visit events are kept for 18 months; the daily totals stay.