How SandboxAQ scales security and compliance with streamlined, automated controls

Results

10 hours saved weekly

across the IT team through self-remediation, automated follow-ups, and proactive device assessments 

60% fewer support tickets

compared to previous tool deployments

50+ active Checks

in place to enforce compliance and keep devices secure 

Outcomes

• Strengthened security by ensuring only trusted and compliant devices can access company systems. 

• Achieved compliance with regulatory frameworks such as FedRAMP, ISO 27001, SOC 2, and CMMC.

• Provided secured access to sensitive data for both employee and contractor devices. 

• Centralized credential management with a single, company-wide deployment.

With 1Password Extended Access Management, I sleep easier. Every login is protected, every device is verified, and compliance requirements are met.

Dan Berman
Head of IT at SandboxAQ

Challenges

SandboxAQ combines AI and quantum technologies to help solve complex issues in life sciences, financial services, cybersecurity, and other industries. Since becoming an independent entity in 2022, the company has grown to 280 full-time employees and approximately 100 contractors. SandboxAQ also works with Controlled Unclassified Information (CUI), a U.S. government-designated category of data that requires extra safeguards.  

As SandboxAQ matured, so did the need for additional safeguards. The company turned to 1Password Enterprise Password Manager and 1Password Device Trust, both part of 1Password Extended Access Management platform, to solve the following challenges:  

• Lack of organization-wide credential management. The company’s previous password management solution was used by only 30 employees – primarily in DevOps – while the rest of the workforce relied on personal password managers, which were inconsistent, increased risk, and provided no visibility to admins. 

• Complex workforce security needs. The organization needed the flexibility to ensure that both employees and contractors had the right level of access to sensitive information, and only from trusted devices.   

• High-stakes compliance requirements. Sensitive information such as CUI demanded strict enforcement of device compliance policies, limiting access to managed and trusted endpoints.  

• Growing security demands. Increasingly complex workflows made it essential to reduce administrative overhead, minimize support tickets, and automate repetitive tasks to maintain strong, consistent security controls.

Simple for employees, strong for IT: unifying credential management under one system 

As SandboxAQ built its internal IT function, Dan Berman’s mission was clear. “My priority was building a stack that the entire company could use and trust,” said the head of IT.

He began with 1Password Enterprise Password Manager – the foundation of 1Password Extended Access Management – to bring organization-wide credential management under one secure, easy-to-use system.

Using 1Password Enterprise Password Manager, SandboxAQ secures access to SaaS apps by storing credentials in encrypted vaults while giving IT policy controls and visibility into usage and compliance. Strong access policies and detailed audit trails help the company align and demonstrate compliance with frameworks such as ISO 27001 and SOC 2. 

“I used 1Password Enterprise Password Manager at other companies, so I knew it would be easy for people to adopt,” said Berman. “What stood out is that it worked for the whole organization and not just a handful of technical users.”

Berman wasn’t the only one who had used 1Password before. Other SandboxAQ employees had been expensing and using 1Password Personal Password Manager at work, signaling a strong demand. Formally adopting and deploying 1Password Enterprise Password Manager has given SandboxAQ organization-wide reach and usability, with favorable pricing sealing the decision. With each business seat including free access to 1Password Families, the team not only reduced redundant costs but also boosted adoption through added personal value.

1Password Enterprise Password Manager is now a cornerstone of SandboxAQ’s security stack. All new full-time employees receive a 1Password invitation on day one, providing secure access to shared credentials and other sensitive secrets. Contractors can also request 1Password accounts through SandboxAQ’s access governance system.

Teams manage their own vault permissions, creating an audit trail and ensuring sensitive data – especially CUI – is only accessible to the right people. 

1Password Enterprise Password Manager delivers the right mix of ease of use and capabilities that encourage adoption by companies like ours.

Dan Berman
Head of IT at SandboxAQ

Real-time device-health assessments with a seamless, low-friction rollout 

With its security foundation in place, SandboxAQ set out to extend protection beyond credentials to the devices accessing company systems. The team implemented 1Password Device Trust. The solution ensures that every sign in originates from a trusted, compliant device, verifying posture checks before granting access. Employees are empowered to use their personal mobile devices to securely access work tools anytime, anywhere.

To strengthen its security posture, SandboxAQ implemented 50 active Checks for desktop devices, covering endpoint detection and response, disk encryption, firewall enablement, OS updates, and screen locks.

Additional Checks ensure mobile devices aren’t jailbroken and are running the latest updates. Beyond compliance, this level of real-time monitoring allows IT to spot early signs of potential support issues, such as low disk space or unhealthy batteries, and address them before they turn into support tickets.

The rollout of 1Password Device Trust was even smoother than Berman expected. For complex tool deployments where users need to take some level of action, SandboxAQ aims for a support ticket rate of under 15%. With 1Password Device Trust, only 6% of employees needed help.

“That kind of success rate is nearly unheard of,” said Berman. “It shows how intuitive 1Password Device Trust really is. But we never felt alone. The 1Password team was always available and responsive, even in moments when we barely needed support.” 

As a lean IT team, we need to be confident that every login is covered. That’s what 1Password Extended Access Management delivers.

Dan Berman
Head of IT at SandboxAQ

Driving efficiency without sacrificing security

By adopting both 1Password Enterprise Password Manager and 1Password Device Trust from the 1Password Extended Access Management suite, SandboxAQ has created a security environment that’s both seamless for employees and contractors, and efficient for IT.

1Password Device Trust reduces manual follow-ups by automating nudges for users when checks fail, while self-remediation options let employees resolve issues themselves. Webhooks and APIs allow SandboxAQ to build self-service workflows – for example, giving users a 30-minute exemption window to enroll a new device without needing IT support. 

By connecting 1Password to their identity provider, SandboxAQ automated provisioning, ensuring new hires are onboarded immediately and access permissions stay up to date. These automations eliminate repetitive tasks and maintain consistency across teams.

Combined, these efficiencies save SandboxAQ at least 10 hours per week across the lean IT team. “Support volume used to be a concern, but now many issues are resolved automatically before they escalate because 1Password helps prevent them in the first place,” said Berman.      

Together, 1Password Enterprise Password Manager and 1Password Device Trust give SandboxAQ the visibility, control, and efficiency it needs to secure sign-ins to every application from any device. With 1Password Extended Access Management solutions, the company has built a foundation that can scale effortlessly as it grows.