Plus Light Packages

A structured, dedicated onboarding package for customers deploying 1Password Device Trust (Unified Access). Includes a dedicated Implementation Consultant, Technical Account Manager, and technical/configuration workshops —delivered remotely within the applicable Service Window.

Pricing is set out in the applicable Order Form.

Service Window

60 days.

This package is designed to be delivered within a 60-day Service Window commencing on the Kickoff Date elected by Customer. The Service Window is an expected delivery timeframe during which sessions, workshops, and Deliverables will be scheduled and provided. Extensions to the Service Window are governed by the applicable Professional Services Terms.

What's Included

Personnel

Implementation Consultant — dedicated throughout the Service Window; responsible for project momentum, stakeholder alignment, milestone tracking, scheduling, and risk management; leads the configuration workshop focused on administrator enablement and operational readiness
Technical Account Manager— leads technical workshops focused on Device Trust environment configuration, policy setup, and validation

Onboarding and Project Management

Standard project plan developed after the Kickoff Date, reflecting Customer's deployment goals, device estate priorities, and timeline
Access to 1Password's project management portal with real-time visibility into milestones, tasks, and shared documentation
Access to 1Password's library of Device Trust onboarding guides and self-serve resources

Technical Workshops (1 Technical Account Manager-led session)

Technical Workshop (Maximum Duration: 2 hours) — Initial technical setup, environment validation, and configuration of core Device Trust policies. Includes review of Customer's MDM/endpoint management environment and initial device health signal configuration.

The specific agenda for each technical workshop will be confirmed at the Kickoff Date based on Customer's environment and deployment requirements.

Configuration Workshop (1 Implementation Consultant-led session)

Configuration Workshop (Maximum Duration: 1 hour) — Practical, hands-on session enabling Customer's administrators to manage Device Trust policies, review device status, handle exceptions, and maintain the deployment on an ongoing basis.

The scope of the configuration workshop will be tailored to Customer's role structure and operational requirements, as confirmed at the Kickoff Date.

Deliverables

Standard Project Plan (Target Date: Day 7) — Deployment project plan with milestones, session schedule, and ownership
Customer Portal Setup (Target Date: Day 7) — Configured project portal with real-time visibility into the project
Workshop Summary Notes (Target Date: Within 5 business days of each session) — Written notes from each technical and configuration workshop capturing decisions made, configurations applied, and agreed next steps
Milestone Summary (Target Date: Day 55–60) — Closing report summarizing configuration status, workshops delivered, device coverage achieved, and key outcomes

Delivery timelines are indicative targets. See the applicable Professional Services Terms for the governing standard.

Project Timeline

Phase 1: Kickoff and Planning (Timeframe: Days 1–7) — Project Kickoff Date; stakeholder introductions; project plan finalized; portal configured; MDM/endpoint environment reviewed; session schedule agreed
Phase 2: Technical Setup and Configuration (Timeframe: Days 7–50) — Technical Workshop 1: Initial Device Trust setup, environment validation, core policy configuration, and device health signal integration
Phase 3: Closure and Handover (Timeframe: Days 50–60) — Final configuration validation; Milestone Summary delivered; formal handover to Customer Success team

Success Objectives

Device Trust environment configured and validated — By Day 30
Device health policy rules defined and applied — By Day 30
Target device populations enrolled and assessed — By Day 50
Administrator configuration training completed — By Day 50
Technical workshops delivered (1 session) — Within the Service Window
Configuration workshop delivered (1 session) — Within the Service Window
Formal handover to Customer Success Manager — By Day 60

Success objectives are indicative targets. They are not contractual guarantees of specific outcomes.

Customer Prerequisites

The following prerequisites are specific to this package. General customer obligations are set out in the applicable Professional Services Terms.

Have a 1Password Device Trust account provisioned and accessible before the Kickoff Date
Have an MDM solution (e.g., Jamf, Microsoft Intune, Kandji) accessible and configured, with an MDM administrator available during technical workshops
Have an identity provider accessible and configured for integration with Device Trust, with an administrator available during technical workshops
Ensure target devices are enrolled in the MDM solution prior to the relevant technical workshop

Assumptions and Dependencies

The following assumptions are specific to this package. If any assumption proves incorrect or additional requirements emerge, delays to the Service Window or changes to pricing may result. Scope, timeline, or fees may be adjusted through the Change Order process in the applicable Professional Services Terms.

MDM Solution — Customer's MDM solution (e.g., Jamf, Microsoft Intune, Kandji) is accessible, configured, and has an MDM administrator available during technical workshops.
Identity Provider Integration — Customer's identity provider is accessible and configured for integration with Device Trust. An identity provider administrator is available during the relevant session.
Device Enrollment — Target devices are enrolled in Customer's MDM solution prior to the relevant technical workshop.

What's Not Included

The following are outside the scope of this package:

On-site or in-person delivery (all sessions are remote)
EPM or SaaS Manager onboarding (covered by separate packages)
MDM solution configuration or management beyond Device Trust integration scope
Managed or fully hands-on implementation (Customer retains responsibility for all system configurations)
Post-Service Window support (available through 1Password's Customer Success or support channels)
Any services outside this scope without a separately agreed Change Order

This Service Package description is governed by the applicable Professional Services Terms agreed between the parties.

Plus Light Silver – SaaS Manager

Service Package Description v1.0 | Effective Date: November 2, 2026

Overview

A structured, dedicated onboarding package for customers deploying 1Password SaaS Manager. Includes a dedicated Implementation Consultant, Technical Account Manager, and configuration/consultancy sessions — delivered remotely within the applicable Service Window.

Pricing is set out in the applicable Order Form.

Service Window

60 days.

This package is designed to be delivered within a 60-day Service Window commencing on the Kickoff Date elected by Customer. The Service Window is an expected delivery timeframe during which sessions and Deliverables will be scheduled and provided. Extensions to the Service Window are governed by the applicable Professional Services Terms.

What's Included

Personnel

Implementation Consultant — guides the Customer through the onboarding milestones and delivers the configuration sessions below
Technical Account Manager — provides 1 mandatory consultancy session an up to 2 hours of optional consultancy session related to the topics in the applicable list below, to be scheduled in one or more sessions of at least 1 hour each, as selected by the Customer

Onboarding and Project Management

Standard project plan developed after the Kickoff Date, reflecting Customer's deployment goals, integration priorities, and timeline
Access to 1Password's project management portal with real-time visibility into milestones, tasks, and shared documentation
Access to 1Password's library of SaaS Manager onboarding guides and self-serve resources

Configuration Sessions (3 Implementation Consultant-led sessions)

1 (Product Area: Account Setup and Initial Configuration; Maximum Duration: 1 hour) — Initial SaaS Manager account configuration, admin access setup, and environment validation.
2 (Product Area: SaaS Application Discovery; Maximum Duration: 1 hour) — Configuring discovery integrations to surface SaaS applications in use across Customer's organization.
3 (Product Area: Administrator Enablement; Maximum Duration: 1 hour) — Ensuring administrators are proficient in day-to-day SaaS Manager operations, user management, and ongoing integration maintenance.

Technical Account Manager-led Consultancy Sessions (Session7 is mandatory. Customer may select up to 2 optional sessions from Sessions 4-6, totaling no more than 2 hours, in sessions of at least 1 hour each)

4 (Product Area: Integration Configuration; Maximum Duration: 1 hour; Mandatory or Optional: Optional) — Connecting and validating priority SaaS application integrations.
5 (Product Area: Policy and Governance Configuration; Maximum Duration: 1 hour; Mandatory or Optional: Optional) — Setting up policies, risk thresholds, and governance rules aligned to Customer's security requirements.
6 (Product Area: Reporting and Alerting Setup; Maximum Duration: 1 hour; Mandatory or Optional: Optional) — Configuring dashboards, reports, and alerts for ongoing administrator visibility.
7 (Product Area: Review and Handover Preparation; Maximum Duration: 1 hour; Mandatory or Optional: Mandatory) — Final configuration review, issue resolution, and preparation for handover to the Customer Success Manager.

The specific agenda and sequence of sessions will be confirmed at the Kickoff Date and may be adjusted by mutual written agreement to reflect Customer's priorities.

Deliverables

Standard Project Plan (Target Date: Day 7) — Deployment project plan with milestones, session schedule, and ownership
Customer Portal Setup (Target Date: Day 7) — Configured project portal with real-time visibility into the project
Session Summary Notes (Target Date: Within 5 business days of each session) — Written notes from each configuration session capturing decisions made, configurations applied, and agreed next steps
Milestone Summary (Target Date: Day 55–60) — Closing report summarizing configuration status, integrations completed, sessions delivered, and key outcomes

Delivery timelines are indicative targets. See the applicable Professional Services Terms for the governing standard.

Project Timeline

Phase 1: Kickoff and Planning (Timeframe: Days 1–7) — Project Kickoff Date; stakeholder introductions; project plan finalized; portal configured; session schedule agreed
Phase 2: Initial Configuration (Timeframe: Days 7–30) — Sessions 1–3: Account setup; SaaS application discovery; administrator enablement
Phase 3: Advanced Configuration and Enablement (Timeframe: Days 30–50) — Sessions 4–7: Environment validated, priority integration configuration, policy and governance setup; reporting and alerting configuration;
Phase 4: Review and Handover (Timeframe: Days 50–60) — Session 7: Final configuration review and handover preparation; Milestone Summary delivered; formal handover to Customer Success team

Success Objectives

SaaS Manager account fully configured for Customer's environment — By Day 30
Initial SaaS application discovery completed — By Day 30
Key SaaS integrations connected and validated — By Day 50
Administrator enablement completed — By Day 50
All in-scope configuration sessions delivered — Within the Service Window
Formal handover to Customer Success Manager — By Day 60

Success objectives are indicative targets. They are not contractual guarantees of specific outcomes.

Customer Prerequisites

The following prerequisites are specific to this package.

Have a 1Password SaaS Manager account provisioned and accessible before the Kickoff Date
Have relevant SaaS application admin credentials available for discovery and integration sessions
Have internal security and IT governance requirements documented before policy configuration sessions

Assumptions and Dependencies

SaaS Application Discovery — Customer's SaaS applications and relevant admin credentials are accessible and available during discovery sessions.
Integration Configuration — Third-party SaaS application APIs are accessible and Customer holds appropriate admin-level access to configure integrations.
Policy and Governance Configuration — Customer's internal security and IT governance requirements are defined and available prior to policy configuration sessions.

What's Not Included

The following are outside the scope of this package:

On-site or in-person delivery (all sessions are remote)
EPM or Device Trust onboarding (covered by separate packages)
Custom integration development or connector builds beyond standard SaaS Manager integration scope
Managed or fully hands-on implementation (Customer retains responsibility for all system configurations)
Post-Service Window support (available through 1Password's Customer Success or support channels)
Any services outside this scope without a separately agreed Change Order

This Service Package description is governed by the applicable Professional Services Terms agreed between the parties.

Plus Light Gold

Service Package Description v1.0 | Effective Date: November 2, 2026

Overview

PLUS Light Gold is a bundled service package that combines two PLUS Light Silver service packages: Device Trust (Unified Access) and SaaS Manager. Customers purchasing PLUS Light Gold receive the full onboarding experience for both products, delivered within their respective Service Windows under the applicable Professional Services Terms.

Pricing is set out in the applicable Order Form.

What’s Included

PLUS Light Gold includes the following two service packages, each governed by its own Service Package description:

PLUS Light Silver — Device Trust (Unified Access)

A structured, dedicated onboarding package for customers deploying 1Password Device Trust (Unified Access). Includes a dedicated Implementation Consultant, Technical Account Manager, and technical/configuration workshops — delivered remotely within a 60-day Service Window.

Full service package description: PLUS Light Silver Device Trust Service Package Description

PLUS Light Silver — SaaS Manager

A structured, dedicated onboarding package for customers deploying 1Password SaaS Manager. Includes a dedicated Implementation Consultant, Technical Account Manager, and configuration/consultancy sessions — all delivered remotely within a 60-day Service Window.

Full service package description: PLUS Light Silver SaaS Manager Service Package Description

Delivery

Each service package within PLUS Light Gold is delivered independently, with its own Kickoff Date, Service Window, and project team. The two engagements may run concurrently or sequentially, as agreed between the parties at or before the first Kickoff Date.

Governing Terms

Each service package included in PLUS Light Gold is governed by the applicable Professional Services Terms agreed between the parties and the relevant Service Package description.

Plus Silver – Enterprise Password Manager

Service Package Description v1.0 | Effective Date: November 2, 2026

Overview

A structured, dedicated onboarding package for customers deploying 1Password Enterprise Password Manager (EPM). Includes a dedicated Implementation Consultant and Technical Account Manager, live training, and technical workshops — delivered remotely within the applicable Service Window.

Pricing is set out in the applicable Order Form.

Service Window

60 days.

What’s Included

Personnel

Implementation Consultant — dedicated throughout the Service Window; responsible for project momentum, stakeholder alignment, milestone tracking, scheduling, and risk management; provides 4 hours of Live Training Sessions to be scheduled in one or more sessions of at least 1 hour each, as selected by the Customer
Technical Account Manager — available on-call throughout the Service Window for reactive technical guidance and escalation support, and provides 4 hours of Technical Workshops in the applicable list below, to be scheduled in one or more sessions of at least 1 hour each, as selected by the Customer

Onboarding and Project Management

Standard project plan developed after the Kickoff Date, reflecting the Customer’s deployment goals, organizational structure, and timeline
Access to 1Password’s project management portal with real-time visibility into milestones, tasks, and shared documentation
Access to 1Password’s library of onboarding guides and self-serve resources

Implementation Consultant-led Live Training Sessions

Owner / Admin Consultation (Maximum Duration: 1 hour) — Training for vault owners and administrators on day-to-day management, policies, and best practices
End User Training (Maximum Duration: 1 hour) — Training to drive adoption across the organization
Additional Sessions — Up to 2 hours (1 or 2 sessions of at least 1 hour each) Topics to be agreed at kickoff based on the Customer’s deployment priorities

Technical Account Manager-led Technical Workshops

SSO Configuration (Maximum Duration: 1 hour) — Guidance on configuring Single Sign-On integration with the Customer’s identity provider
Hosted SCIM Provisioning (Maximum Duration: 1 hour) — Guidance on setting up hosted SCIM-based user provisioning for automated account lifecycle management
Developer / Admin Tools — Up to 2 hours (1 or 2 sessions of at least 1 hour each) Technical sessions covering 1Password CLI, SDKs, and automation capabilities. May include agreed script or integration work within defined scope

The specific scope of Developer / Admin Tools sessions, including any agreed script or integration work, must be confirmed in writing by 1Password before those sessions begin. Additional hours beyond the scope of this package may be purchased separately.

Deliverables

Standard Project Plan (Target Date: Day 7) — Deployment plan with milestones, timelines, and ownership
Customer Portal Setup (Target Date: Day 7) — Configured project portal with real-time visibility into the project
Training Recordings (Target Date: Within 5 business days of each session) — Recordings of all delivered live training sessions
Workshop Summary Notes (Target Date: Within 5 business days of each workshop) — Written notes capturing decisions made, configurations recommended, and agreed next steps
Milestone Summary (Target Date: Day 55–60) — Closing report summarizing deployment status, seat activation rates, sessions delivered, and key outcomes

Delivery timelines are indicative targets. See the applicable Professional Services Terms for the governing standard.

Project Timeline

Phase 1: Kickoff and Planning (Timeframe: Days 1–7) — Project Kickoff Date; stakeholder introductions; project plan finalized; portal configured; session schedule agreed
Phase 2: Technical Setup (Timeframe: Days 7–30) — SSO workshop; SCIM provisioning workshop; EPM configuration; technical environment validated
Phase 3: Training and Rollout (Timeframe: Days 30–50) — Admin and owner training; end-user training; additional agreed sessions; deployment tracked against milestones
Phase 4: Closure and Handover (Timeframe: Days 50–60) — Final progress review; Developer/Admin Tools sessions; Milestone Summary delivered; handover to Customer Success team

Success Objectives

1Password EPM account fully configured for Customer’s environment — By Day 30
SSO and provisioning integrations live — By Day 30
Administrator and owner training completed — By Day 50
End-user rollout commenced across target departments — By Day 50
Agreed percentage of purchased seats activated — To be confirmed at kickoff
Formal handover to Customer Success Manager — By Day 60

Success objectives are indicative targets. They are not contractual guarantees of specific outcomes.

Customer Prerequisites

The following prerequisites are specific to this package:

1. Have a 1Password EPM account provisioned and accessible before the Kickoff Date

2. For SSO and SCIM workshops: have an identity provider (e.g., Okta, Microsoft Entra ID, Google Workspace) accessible and configured, with an administrator available during the session

Assumptions and Dependencies

SSO Configuration — Customer’s identity provider is accessible, provisioned, and configured. An identity provider administrator is available during the session.
SCIM Provisioning — Customer’s identity provider supports hosted SCIM and is accessible during the session.
Developer / Admin Tools — Customer’s development or IT environment is accessible. Relevant technical staff are available during sessions.

What’s Not Included

The following are outside the scope of this package:

On-site or in-person delivery (all sessions are remote)
Device Trust or SaaS Manager onboarding (covered by separate packages)
Custom integrations or development beyond the agreed Developer / Admin Tools scope
Managed or fully hands-on implementation (Customer retains responsibility for all system configurations)
Post-Service-Window support (available through 1Password’s Customer Success or support channels)
Any services outside this scope without a separately agreed Change Order

This Service Package description is governed by the applicable Professional Services Terms agreed between the parties.

Plus Silver – Device Trust

Service Package Description v1.0 | Effective Date: November 2, 2026

Overview

A structured, dedicated onboarding package for customers deploying 1Password Device Trust (Unified Access). Includes a dedicated Implementation Consultant, Technical Account Manager, and technical/configuration workshops — delivered remotely within the applicable Service Window.

Pricing is set out in the applicable Order Form.

Service Window

60 days.

What's Included

Personnel

Implementation Consultant — dedicated throughout the Service Window; responsible for project momentum, stakeholder alignment, milestone tracking, scheduling, and risk management; leads the configuration workshop focused on administrator enablement and operational readiness
Technical Account Manager — leads technical workshops focused on Device Trust environment configuration, policy setup, and validation

Onboarding and Project Management

Standard project plan developed after the Kickoff Date, reflecting Customer's deployment goals, device estate priorities, and timeline
Access to 1Password's project management portal with real-time visibility into milestones, tasks, and shared documentation
Access to 1Password's library of Device Trust onboarding guides and self-serve resources

Technical Workshops (2 Technical Account Manager-led session)

Technical Workshop 1 (Maximum Duration: 2 hours) — Initial technical setup, environment validation, and configuration of core Device Trust policies. Includes review of Customer's MDM/endpoint management environment and initial device health signal configuration.
Technical Workshop 2 (Maximum Duration: 2 hours) — Advanced configuration, policy refinement, and technical validation across target device populations. Addresses edge cases, exception handling, and integration with Customer's identity provider.

The specific agenda for each technical workshop will be confirmed at the Kickoff Date based on Customer's environment and deployment requirements.

Configuration Workshop (1 Implementation Consultant-led session)

Configuration Workshop (Maximum Duration: 1 hour) — Practical, hands-on session enabling Customer's administrators to manage Device Trust policies, review device status, handle exceptions, and maintain the deployment on an ongoing basis.

The scope of the configuration workshop will be tailored to Customer's role structure and operational requirements, as confirmed at the Kickoff Date.

Deliverables

Standard Project Plan (Target Date: Day 7) — Deployment project plan with milestones, session schedule, and ownership
Customer Portal Setup (Target Date: Day 7) — Configured project portal with real-time visibility into the project
Workshop Summary Notes (Target Date: Within 5 business days of each session) — Written notes from each technical and configuration workshop capturing decisions made, configurations applied, and agreed next steps
Milestone Summary (Target Date: Day 55–60) — Closing report summarizing configuration status, workshops delivered, device coverage achieved, and key outcomes

Delivery timelines are indicative targets. See the applicable Professional Services Terms for the governing standard.

Project Timeline

Phase 1: Kickoff and Planning (Timeframe: Days 1–7) — Project Kickoff Date; stakeholder introductions; project plan finalized; portal configured; MDM/endpoint environment reviewed; session schedule agreed
Phase 2: Technical Setup and Configuration (Timeframe: Days 7–30) — Technical Workshop 1: Initial Device Trust setup, environment validation, core policy configuration, and device health signal integration
Phase 3: Advanced Configuration and Enablement (Timeframe: Days 30–50) — Technical Workshop 2: Advanced policy refinement, edge case handling, and extended device population coverage. Configuration Workshop: Administrator enablement and operational readiness
Phase 4: Closure and Handover (Timeframe: Days 50–60) — Final configuration validation; Milestone Summary delivered; formal handover to Customer Success team

Success Objectives

Device Trust environment configured and validated — By Day 30
Device health policy rules defined and applied — By Day 30
Target device populations enrolled and assessed — By Day 50
Administrator configuration training completed — By Day 50
Technical workshops delivered (2 sessions) — Within the Service Window
Configuration workshop delivered (1 session) — Within the Service Window
Formal handover to Customer Success Manager — By Day 60

Success objectives are indicative targets. They are not contractual guarantees of specific outcomes.

Customer Prerequisites

The following prerequisites are specific to this package.

Have a 1Password Device Trust account provisioned and accessible before the Kickoff Date
Have an MDM solution (e.g., Jamf, Microsoft Intune, Kandji) accessible and configured, with an MDM administrator available during technical workshops
Have an identity provider accessible and configured for integration with Device Trust, with an administrator available during technical workshops
Ensure target devices are enrolled in the MDM solution prior to the relevant technical workshop

Assumptions and Dependencies

MDM Solution — Customer's MDM solution (e.g., Jamf, Microsoft Intune, Kandji) is accessible, configured, and has an MDM administrator available during technical workshops.
Identity Provider Integration — Customer's identity provider is accessible and configured for integration with Device Trust. An identity provider administrator is available during the relevant session.
Device Enrollment — Target devices are enrolled in Customer's MDM solution prior to the relevant technical workshop.

What's Not Included

The following are outside the scope of this package:

On-site or in-person delivery (all sessions are remote)
EPM or SaaS Manager onboarding (covered by separate packages)
MDM solution configuration or management beyond Device Trust integration scope
Managed or fully hands-on implementation (Customer retains responsibility for all system configurations)
Post-Service Window support (available through 1Password's Customer Success or support channels)
Any services outside this scope without a separately agreed Change Order

This Service Package description is governed by the applicable Professional Services Terms agreed between the parties.

Plus Silver – SaaS Manager

Service Package Description v1.0 | Effective Date: November 2, 2026

Overview

A structured, dedicated onboarding package for customers deploying 1Password SaaS Manager. Includes a dedicated Implementation Consultant, Technical Account Manager, and configuration sessions — delivered remotely within the applicable Service Window.

Pricing is set out in the applicable Order Form.

Service Window

60 days.

This package is designed to be delivered within a 60-day Service Window commencing on the Kickoff Date elected by Customer. The Service Window is an expected delivery timeframe during which sessions and Deliverables will be scheduled and provided. Extensions to the Service Window are governed by the applicable Professional Services Terms.

What's Included

Personnel

Implementation Consultant — dedicated throughout the Service Window; responsible for project momentum, stakeholder alignment, milestone tracking, scheduling, and risk management; may provide configuration sessions with or in lieu of Technical Account Manager
Technical Account Manager— provides 3 mandatory consultancy sessions and up to 3 hours of optional consultancy sessions related to the topics in the applicable list below in up to 3 sessions of at least 1 hour each as selected by the Customer

Onboarding and Project Management

Standard project plan developed after the Kickoff Date, reflecting Customer's deployment goals, integration priorities, and timeline
Access to 1Password's project management portal with real-time visibility into milestones, tasks, and shared documentation
Access to 1Password's library of SaaS Manager onboarding guides and self-serve resources

Technical Account Manager-led Configuration Sessions (Sessions 1, 2 and 8 are mandatory. Customer may select up to 3 optional sessions from Sessions 3–7, totaling no more than 3 hours, in sessions of at least 1 hour each)

1 (Product Area: Account Setup and Initial Configuration; Maximum Duration: 1 hour; Mandatory or Optional: Mandatory) — Initial SaaS Manager account configuration, admin access setup, and environment validation.
2 (Product Area: SaaS Application Discovery; Maximum Duration: 1 hour; Mandatory or Optional: Mandatory) — Configuring discovery integrations to surface SaaS applications in use across Customer's organization.
3 (Product Area: Integration Configuration (Round 1); Maximum Duration: 1 to 3 hours; Mandatory or Optional: Optional) — Connecting and validating priority SaaS application integrations.
4 (Product Area: Integration Configuration (Round 2); Maximum Duration: 1 to 3 hours; Mandatory or Optional: Optional) — Continued integration configuration for secondary priority applications.
5 (Product Area: Policy and Governance Configuration; Maximum Duration: 1 to 3 hours; Mandatory or Optional: Optional) — Setting up policies, risk thresholds, and governance rules aligned to Customer's security requirements.
6 (Product Area: Reporting and Alerting Setup; Maximum Duration: 1 to 3 hours; Mandatory or Optional: Optional) — Configuring dashboards, reports, and alerts for ongoing administrator visibility.
7 (Product Area: Administrator Enablement; Maximum Duration: 1 to 3 hours; Mandatory or Optional: Optional) — Ensuring administrators are proficient in day-to-day SaaS Manager operations, user management, and ongoing integration maintenance.
8 (Product Area: Review and Handover Preparation; Maximum Duration: 1 hour; Mandatory or Optional: Mandatory) — Final configuration review, issue resolution, and preparation for handover to the Customer Success Manager.

The specific agenda and sequence of sessions will be confirmed at the Kickoff Date and may be adjusted by mutual written agreement to reflect Customer's priorities.

Deliverables

Standard Project Plan (Target Date: Day 7) — Deployment project plan with milestones, session schedule, and ownership
Customer Portal Setup (Target Date: Day 7) — Configured project portal with real-time visibility into the project
Session Summary Notes (Target Date: Within 5 business days of each session) — Written notes from each configuration session capturing decisions made, configurations applied, and agreed next steps
Milestone Summary (Target Date: Day 55–60) — Closing report summarizing configuration status, integrations completed, sessions delivered, and key outcomes

Delivery timelines are indicative targets. See the applicable Professional Services Terms for the governing standard.

Project Timeline

Phase 1: Kickoff and Planning (Timeframe: Days 1–7) — Project Kickoff Date; stakeholder introductions; project plan finalized; portal configured; session schedule agreed
Phase 2: Initial Configuration (Timeframe: Days 7–30) — Sessions 1–4: Account setup; SaaS application discovery; priority integration configuration; environment validated
Phase 3: Advanced Configuration and Enablement (Timeframe: Days 30–50) — Sessions 5–7: Policy and governance setup; reporting and alerting configuration; administrator enablement
Phase 4: Review and Handover (Timeframe: Days 50–60) — Session 8: Final configuration review and handover preparation; Milestone Summary delivered; formal handover to Customer Success team

Success Objectives

SaaS Manager account fully configured for Customer's environment — By Day 30
Initial SaaS application discovery completed — By Day 30
Key SaaS integrations connected and validated — By Day 50
Administrator enablement completed — By Day 50
All configuration sessions delivered — Within the Service Window
Formal handover to Customer Success Manager — By Day 60

Success objectives are indicative targets. They are not contractual guarantees of specific outcomes.

Customer Prerequisites

The following prerequisites are specific to this package.

Have a 1Password SaaS Manager account provisioned and accessible before the Kickoff Date
Have relevant SaaS application admin credentials available for discovery and integration sessions
Have internal security and IT governance requirements documented before policy configuration sessions

Assumptions and Dependencies

SaaS Application Discovery — Customer's SaaS applications and relevant admin credentials are accessible and available during discovery sessions.
Integration Configuration — Third-party SaaS application APIs are accessible and Customer holds appropriate admin-level access to configure integrations.
Policy and Governance Configuration — Customer's internal security and IT governance requirements are defined and available prior to policy configuration sessions.

What's Not Included

The following are outside the scope of this package:

On-site or in-person delivery (all sessions are remote)
EPM or Device Trust onboarding (covered by separate packages)
Custom integration development or connector builds beyond standard SaaS Manager integration scope
Managed or fully hands-on implementation (Customer retains responsibility for all system configurations)
Post-Service Window support (available through 1Password's Customer Success or support channels)
Any services outside this scope without a separately agreed Change Order

This Service Package description is governed by the applicable Professional Services Terms agreed between the parties.

Plus Gold

Service Package Description v1.0 | Effective Date: November 2, 2026

Overview

PLUS Gold is a bundled service package that combines any two of the following three PLUS Silver service packages: Enterprise Password Manager (EPM), Device Trust (Unified Access), and SaaS Manager. The specific combination included in a Customer’s PLUS Gold package is set out in the applicable Order Form.

Pricing is set out in the applicable Order Form.

Available Service Packages

The following three PLUS Silver service packages are available under PLUS Gold. Customers receive two of the three, as specified in their Order Form:

PLUS Silver — Enterprise Password Manager (EPM)

A structured, dedicated onboarding package for customers deploying 1Password Enterprise Password Manager (EPM). Includes a dedicated Implementation Consultant, Technical Account Manager, live training sessions, and technical workshops — delivered remotely within a 60-day Service Window.

Full service package description: PLUS Silver EPM Service Package Description

PLUS Silver — Device Trust (Unified Access)

A structured, dedicated onboarding package for customers deploying 1Password Device Trust (Unified Access). Includes a dedicated Implementation Consultant, Technical Account Manager, and technical/configuration workshops — delivered remotely within a 60-day Service Window.

Full service package description: PLUS Silver Device Trust Service Package Description

PLUS Silver — SaaS Manager

A structured, dedicated onboarding package for customers deploying 1Password SaaS Manager. Includes a dedicated Implementation Consultant, Technical Account Manager, and configuration sessions — delivered remotely within a 60-day Service Window.

Full service package description: PLUS Silver SaaS Manager Service Package Description

Delivery

Each service package within PLUS Gold is delivered independently, with its own Kickoff Date, Service Window, and project team. The two engagements may run concurrently or sequentially, as agreed between the parties at or before the first Kickoff Date.

Governing Terms

Each service package included in PLUS Gold is governed by the applicable Professional Services Terms agreed between the parties and the relevant Service Package description.

Plus Platinum

Service Package Description v1.0 | Effective Date: November 2, 2026

Overview

PLUS Platinum is a bundled service package that includes all three PLUS Silver service packages: Enterprise Password Manager (EPM), Device Trust (Unified Access), and SaaS Manager. Customers purchasing PLUS Platinum receive the full onboarding experience for all three products, each delivered within its own Service Window under the applicable Professional Services Terms.

Pricing is set out in the applicable Order Form.

What’s Included

PLUS Platinum includes the following three service packages, each governed by its own Service Package description:

PLUS Silver — Enterprise Password Manager (EPM)

Full service package description: PLUS Silver EPM Service Package Description

PLUS Silver — Device Trust (Unified Access)

A structured, dedicated onboarding package for customers deploying 1Password Device Trust (Unified Access). Includes a dedicated Implementation Consultant, Technical Account Manager, and technical/configuration workshops — delivered remotely within a 60-day Service Window.

Full service package description: PLUS Silver Device Trust Service Package Description

PLUS Silver — SaaS Manager

A structured, dedicated onboarding package for customers deploying 1Password SaaS Manager. Includes a dedicated Implementation Consultant, Technical Account Manager, and configuration sessions — delivered remotely within a 60-day Service Window.

Full service package description: PLUS Silver SaaS Manager Service Package Description

Delivery

Each service package within PLUS Platinum is delivered independently, with its own Kickoff Date, Service Window, and project team. The three engagements may run concurrently or sequentially, as agreed between the parties at or before the first Kickoff Date.

Governing Terms

Each service package included in PLUS Platinum is governed by the applicable Professional Services Terms agreed between the parties and the relevant Service Package description.

Premier Silver – Enterprise Password Manager

Service Package Description v1.0 | Effective Date: November 2, 2026

Overview

1Password’s highest-touch EPM onboarding package, designed for enterprise customers with significant deployment complexity. Includes a dedicated Project Manager, Implementation Consultant, Technical Account Manager, and Executive Concierge support, on-call technical guidance, a comprehensive suite of live training sessions, and in-depth technical workshops — delivered remotely within the applicable Service Window.

Pricing is set out in the applicable Order Form.

Service Window

90 days.

This package is designed to be delivered within a 90-day Service Window commencing on the Kickoff Date elected by Customer. The Service Window is an expected delivery timeframe during which sessions, workshops, and Deliverables will be scheduled and provided. Extensions to the Service Window are governed by the applicable Professional Services Terms.

What’s Included

Personnel

Project Manager — dedicated throughout the Service Window; responsible for project momentum, stakeholder alignment, milestone tracking, scheduling, and risk management
Implementation Consultant — provides training and technical consultancy; delivers Live Training Sessions
Technical Account Manager — available on-call throughout the Service Window for reactive technical guidance and escalation support
Executive Concierge — senior-level point of escalation and strategic alignment support throughout the Service Window; available for escalation by Customer’s executive sponsor

Onboarding and Project Management

Tailored project plan developed collaboratively at the Kickoff Date, reflecting the Customer’s specific deployment goals, organizational structure, and timeline
Access to 1Password’s project management portal with real-time visibility into milestones, tasks, and shared documentation
Access to 1Password’s library of onboarding guides and self-serve resources

Implementation Consultant-led Live Training Sessions

Owner / Admin Consultation (Maximum Duration: 1 hour) — Training for vault owners and administrators on day-to-day management, policies, and best practices
Team Member Training (Maximum Duration: 1 hour) — End-user-facing training to drive adoption across the organization
IT Help Desk Training (Maximum Duration: 1 hour) — Training for IT support staff on handling common employee queries and support requests related to 1Password
Train the Trainer (Maximum Duration: 1 hour) — Equips the Customer’s internal training leads to independently deliver onboarding content to additional teams
Additional Sessions — Up to 2 hours (1 or 2 sessions of at least 1 hour each) Topics to be agreed at the Kickoff Date based on the Customer’s deployment priorities

The composition of sessions will be confirmed at the Kickoff Date. Individual sessions may be combined, split, or substituted by mutual written agreement.

Technical Account Manager-led Technical Workshops

SSO Configuration (Maximum Duration: 1 hour) — Guidance on configuring Single Sign-On integration with the Customer’s identity provider
Hosted SCIM Provisioning (Maximum Duration: 1 hour) — Guidance on setting up hosted SCIM-based user provisioning for automated account lifecycle management
Developer / Admin Tools — Up to 10 hours (up to 10 sessions of at least 1 hour each) In-depth technical sessions covering 1Password CLI, SDKs, and automation capabilities. May include agreed custom script or integration work within defined scope

The specific scope of Developer / Admin Tools sessions, including any agreed custom script or integration work, must be confirmed in writing by 1Password before those sessions begin. Additional hours beyond the scope of this package may be purchased separately.

Deliverables

Tailored Project Plan (Target Date: Day 10) — Customized deployment project plan with milestones, timelines, and ownership
Customer Portal Setup (Target Date: Day 10) — Configured project portal with real-time visibility into the project
Training Recordings (Target Date: Within 5 business days of each session) — Recordings of all delivered live training sessions
Workshop Summary Notes (Target Date: Within 5 business days of each workshop) — Written notes capturing decisions made, configurations recommended, and agreed next steps
Milestone Summary (Target Date: Day 85–90) — Closing report summarizing deployment status, seat activation rates, sessions delivered, and key outcomes

Delivery timelines are indicative targets. See the applicable Professional Services Terms for the governing standard.

Project Timeline

Phase 1: Kickoff and Planning (Timeframe: Days 1–10) — Project Kickoff Date; stakeholder introductions; tailored project plan finalized; portal configured; session schedule agreed
Phase 2: Technical Setup (Timeframe: Days 10–30) — SSO workshop; SCIM provisioning workshop; EPM configuration; technical environment validated
Phase 3: Training and Rollout (Timeframe: Days 30–70) — Admin and owner training; Team Member Training; IT Help Desk Training; Train the Trainer; additional agreed sessions; deployment tracked against milestones
Phase 4: Developer / Admin Tools (Timeframe: Days 40–80) — Developer/Admin Tools workshops (up to 10 hours across multiple sessions); any agreed custom script or integration work
Phase 5: Closure and Handover (Timeframe: Days 80–90) — Final progress review; Milestone Summary delivered; formal handover to Customer Success Manager

Phases 3 and 4 may run concurrently. Session scheduling within each phase is coordinated by the Project Manager with the Customer throughout the Service Window.

Success Objectives

1Password EPM account fully configured for Customer’s environment — By Day 30
SSO and provisioning integrations live — By Day 30
Administrator and owner training completed — By Day 70
End-user rollout commenced across target departments — By Day 70
Agreed percentage of purchased seats activated — To be confirmed at the Kickoff Date
Formal handover to Customer Success Manager — By Day 90

Success objectives are indicative targets. They are not contractual guarantees of specific outcomes.

Customer Prerequisites

The following prerequisites are specific to this package:

1. Have a 1Password EPM account provisioned and accessible before the Kickoff Date

2. For SSO and SCIM workshops: have an identity provider (e.g., Okta, Microsoft Entra ID, Google Workspace) accessible and configured, with an administrator available during the session

3. For Developer / Admin Tools sessions: have relevant development or IT environment accessible, with technical staff available during sessions

Assumptions and Dependencies

SSO Configuration — Customer’s identity provider is accessible, provisioned, and configured. An identity provider administrator is available during the session.
SCIM Provisioning — Customer’s identity provider supports hosted SCIM and is accessible during the session.
Developer / Admin Tools — Customer’s development or IT environment is accessible. Relevant technical staff are available during sessions. Any agreed custom script or integration work is scoped in writing before sessions commence.

What’s Not Included

The following are outside the scope of this package:

On-site or in-person delivery (all sessions are remote)
Device Trust or SaaS Manager onboarding (covered by separate packages)
Custom integrations or development beyond the agreed Developer / Admin Tools scope
Managed or fully hands-on implementation (Customer retains responsibility for all system configurations)
Post-Service-Window support (available through 1Password’s Customer Success or support channels)
Any services outside this scope without a separately agreed Change Order

This Service Package description is governed by the applicable Professional Services Terms agreed between the parties.

Premier Silver – Device Trust

Service Package Description v1.0 | Effective Date: November 2, 2026

Overview

1Password’s highest-touch Device Trust onboarding package, designed for enterprise customers deploying Device Trust (Unified Access) at scale. Includes a dedicated Project Manager, Implementation Consultant, Technical Account Manager, Executive Concierge, and technical/configuration workshops — all delivered remotely within the applicable Service Window.

Pricing is set out in the applicable Order Form.

Service Window

90 days.

What’s Included

Personnel

Project Manager— dedicated throughout the Service Window; responsible for session scheduling, milestone tracking, stakeholder alignment, and engagement coordination
Implementation Consultant — leads the two configuration workshops focused on administrator enablement and operational readiness
Technical Account Manager — provides dedicated technical guidance and strategic support throughout the Service Window; leads the four technical workshops focused on Device Trust environment configuration, policy setup, and validation
Executive Concierge — senior-level point of escalation and strategic alignment support throughout the Service Window; available for escalation by Customer’s executive sponsor

Onboarding and Project Management

Tailored project plan developed at the Kickoff Date, reflecting Customer’s deployment goals, device estate priorities, and timeline
Access to 1Password’s project management portal with real-time visibility into milestones, tasks, and shared documentation
Access to 1Password’s library of Device Trust onboarding guides and self-serve resources

Technical Workshops (4 Technical Account Manager-led sessions)

Technical Workshop 1 (Maximum Duration: 1 hour) — Initial technical setup, environment validation, and configuration of core Device Trust policies. Includes review of Customer’s MDM/endpoint management environment and initial device health signal configuration.
Technical Workshop 2 (Maximum Duration: 1 hour) — Intermediate configuration, expanding policy coverage to additional device populations and operating system environments.
Technical Workshop 3 (Maximum Duration: 1 hour) — Advanced configuration, including complex policy rules, conditional access integration, and edge case handling across Customer’s full device estate.
Technical Workshop 4 (Maximum Duration: 1 hour) — Final technical validation, policy optimization, exception management review, and preparation for operational handover.

The specific agenda for each technical workshop will be confirmed at the Kickoff Date based on Customer’s environment and deployment requirements.

Configuration Workshops (2 Implementation Consultant-led sessions)

Configuration Workshop 1 (Maximum Duration: 2 hours) — Practical, hands-on session enabling Customer’s administrators to manage Device Trust policies, review device status, handle exceptions, and maintain the deployment on an ongoing basis.
Configuration Workshop 2 (Maximum Duration: 2 hours) — Advanced administrator enablement covering reporting, governance workflows, audit processes, escalation procedures, and preparation for long-term operational ownership.

The scope of each configuration workshop will be tailored to Customer’s role structure and operational requirements, as agreed at the Kickoff Date.

Deliverables

Tailored Project Plan (Target Date: Day 10) — Deployment project plan with milestones, session schedule, and ownership
Customer Portal Setup (Target Date: Day 10) — Configured project portal with real-time visibility into the project
Workshop Summary Notes (Target Date: Within 5 business days of each session) — Written notes from each technical and configuration workshop capturing decisions made, configurations applied, and agreed next steps
Milestone Summary (Target Date: Day 85–90) — Closing report summarizing configuration status, workshops delivered, device coverage achieved, and key outcomes

Delivery timelines are indicative targets. See the applicable Professional Services Terms for the governing standard.

Project Timeline

Phase 1: Kickoff and Planning (Timeframe: Days 1–10) — Project Kickoff Date; stakeholder introductions; project plan finalized; portal configured; MDM/endpoint environment reviewed; session schedule agreed
Phase 2: Core Technical Setup (Timeframe: Days 10–30) — Technical Workshop 1: Initial Device Trust setup, environment validation, and core policy configuration. Technical Workshop 2: Intermediate policy expansion across additional device populations.
Phase 3: Advanced Configuration (Timeframe: Days 30–60) — Technical Workshop 3: Advanced policy rules, conditional access integration, and full estate coverage. Configuration Workshop 1: Initial administrator enablement and operational readiness.
Phase 4: Enablement and Optimization (Timeframe: Days 60–80) — Technical Workshop 4: Final validation, policy optimization, and exception management. Configuration Workshop 2: Advanced administrator enablement and governance workflows.
Phase 5: Closure and Handover (Timeframe: Days 80–90) — Final configuration validation; Milestone Summary delivered; formal handover to Customer Success Manager.

Success Objectives

Device Trust environment configured and validated — By Day 30
Core device health policy rules defined and applied — By Day 30
Extended and advanced policy configurations completed — By Day 60
All target device populations enrolled and assessed — By Day 60
Administrator configuration training completed (both sessions) — By Day 80
Technical workshops delivered (4 sessions) — Within the Service Window
Configuration workshops delivered (2 sessions) — Within the Service Window
Formal handover to Customer Success Manager — By Day 90

Success objectives are indicative targets. They are not contractual guarantees of specific outcomes.

Customer Prerequisites

The following prerequisites are specific to this package:

1. Have a 1Password Device Trust account provisioned and accessible before the Kickoff Date

2. Have an MDM solution (e.g., Jamf, Microsoft Intune, Kandji) accessible and configured, with an MDM administrator available during technical workshops

3. Have an identity provider accessible and configured for integration with Device Trust, with an administrator available during technical workshops

4. Ensure target devices are enrolled in the MDM solution prior to the relevant technical workshop

5. Where applicable: have a conditional access platform accessible and an administrator available for integration sessions

Assumptions and Dependencies

MDM Solution — Customer’s MDM solution (e.g., Jamf, Microsoft Intune, Kandji) is accessible, configured, and has an MDM administrator available during technical workshops.
Identity Provider Integration — Customer’s identity provider is accessible and configured for integration with Device Trust. An identity provider administrator is available during the relevant session.
Device Enrollment — Target devices are enrolled in Customer’s MDM solution prior to the relevant technical workshop.
Conditional Access Integration — Where applicable, Customer’s conditional access platform is accessible and an administrator is available for integration sessions.

What’s Not Included

The following are outside the scope of this package:

On-site or in-person delivery (all sessions are remote)
EPM or SaaS Manager onboarding (covered by separate packages)
MDM solution configuration or management beyond Device Trust integration scope
Managed or fully hands-on implementation (Customer retains responsibility for all system configurations)
Post-Service-Window support (available through 1Password’s Customer Success or support channels)
Any services outside this scope without a separately agreed Change Order

This Service Package description is governed by the applicable Professional Services Terms agreed between the parties.

Premier Silver – SaaS Manager

Service Package Description v1.0 | Effective Date: November 2, 2026

Overview

1Password’s highest-touch SaaS Manager onboarding package, designed for enterprise customers seeking a comprehensive SaaS visibility and governance deployment. Includes a dedicated Project Manager, Technical Account Manager, Implementation Consultant, Executive Concierge, and an expanded program of 10 TAM-led configuration sessions — delivered remotely within the applicable Service Window.

Pricing is set out in the applicable Order Form.

Service Window

90 days.

This package is designed to be delivered within a 90-day Service Window commencing on the Kickoff Date elected by Customer. The Service Window is an expected delivery timeframe during which sessions and Deliverables will be scheduled and provided. Extensions to the Service Window are governed by the applicable Professional Services Terms.

What’s Included

Personnel

Project Manager — dedicated throughout the Service Window; responsible for session scheduling, milestone tracking, stakeholder alignment, and engagement coordination
Implementation Consultant — provides training and technical consultancy, supporting the Configuration Sessions
Technical Account Manager — dedicated throughout the Service Window; leads all configuration sessions and serves as Customer’s primary technical resource for the engagement
Executive Concierge — senior-level point of escalation and strategic alignment support throughout the Service Window; available for escalation by Customer’s executive sponsor

Onboarding and Project Management

Tailored project plan developed at the Kickoff Date, reflecting Customer’s deployment goals, integration priorities, and timeline
Access to 1Password’s project management portal with real-time visibility into milestones, tasks, and shared documentation
Access to 1Password’s library of SaaS Manager onboarding guides and self-serve resources

Configuration Sessions (10 sessions, Technical Account Manager-led)

1. Account Setup and Initial Configuration (Maximum Duration: 1 hour) — Initial SaaS Manager account configuration, admin access, and environment validation.
2. SaaS Application Discovery (Maximum Duration: 1 hour) — Configuring discovery integrations to surface SaaS applications in use across Customer’s organization.
3. Priority Integration Configuration (Round 1) (Maximum Duration: 1 hour) — Connecting and validating Customer’s highest-priority SaaS application integrations.
4. Priority Integration Configuration (Round 2) (Maximum Duration: 1 hour) — Continued integration work for additional priority applications.
5. Extended Integration Configuration (Maximum Duration: 1 hour) — Connecting and validating secondary-priority SaaS application integrations.
6. Policy and Governance Configuration (Maximum Duration: 1 hour) — Setting up policies, risk thresholds, and governance rules aligned to Customer’s security requirements.
7. Reporting and Alerting Setup (Maximum Duration: 1 hour) — Configuring dashboards, reports, and alerts to give administrators ongoing visibility.
8. Administrator Enablement (Session 1) (Maximum Duration: 1 hour) — Initial administrator training covering day-to-day operations, user management, and ongoing integration maintenance.
9. Administrator Enablement (Session 2) (Maximum Duration: 1 hour) — Advanced administrator enablement covering reporting, governance workflows, and escalation procedures.
10. Review and Handover Preparation (Maximum Duration: 1 hour) — Final configuration review, issue resolution, and preparation for handover to Customer Success Manager.

The specific agenda and sequence of sessions will be agreed at the Kickoff Date and may be adjusted by mutual written agreement to reflect Customer’s priorities.

Deliverables

Tailored Project Plan (Target Date: Day 10) — Deployment project plan with milestones, session schedule, and ownership
Customer Portal Setup (Target Date: Day 10) — Configured project portal with real-time visibility into the project
Session Summary Notes (Target Date: Within 5 business days of each session) — Written notes from each configuration session capturing decisions made, configurations applied, and agreed next steps
Milestone Summary (Target Date: Day 85–90) — Closing report summarizing configuration status, integrations completed, sessions delivered, and key outcomes

Delivery timelines are indicative targets. See the applicable Professional Services Terms for the governing standard.

Project Timeline

Phase 1: Kickoff and Planning (Timeframe: Days 1–10) — Project Kickoff Date; stakeholder introductions; tailored project plan and session schedule finalized; portal configured
Phase 2: Initial Configuration (Timeframe: Days 10–30) — Sessions 1–3: Account setup; SaaS application discovery; priority integration configuration (Round 1)
Phase 3: Advanced Configuration (Timeframe: Days 30–70) — Sessions 4–7: Priority integration configuration (Round 2); extended integrations; policy and governance setup; reporting and alerting configuration
Phase 4: Enablement and Review (Timeframe: Days 70–85) — Sessions 8–9: Administrator enablement (Sessions 1 and 2)
Phase 5: Closure and Handover (Timeframe: Days 85–90) — Session 10: Final configuration review and handover preparation; Milestone Summary delivered; formal handover to Customer Success Manager

Success Objectives

SaaS Manager account fully configured for Customer’s environment — By Day 30
Initial SaaS application discovery completed — By Day 30
Priority SaaS integrations connected and validated — By Day 60
Secondary and extended SaaS integrations completed — By Day 60
Policy, governance, and alerting configuration completed — By Day 70
Administrator training and enablement completed — By Day 80
All 10 configuration sessions delivered — Within the Service Window
Formal handover to Customer Success Manager — By Day 90

Success objectives are indicative targets. They are not contractual guarantees of specific outcomes.

Customer Prerequisites

The following prerequisites are specific to this package:

1. Have a 1Password SaaS Manager account provisioned and accessible before the Kickoff Date

2. Have SaaS applications and relevant admin credentials accessible and available during discovery sessions

3. Hold appropriate admin-level access to third-party SaaS application APIs required for integration configuration

4. Have internal security and IT governance requirements defined and available prior to policy configuration sessions

Assumptions and Dependencies

SaaS Application Discovery — Customer’s SaaS applications and relevant admin credentials are accessible and available during discovery sessions.
Integration Configuration — Third-party SaaS application APIs are accessible and Customer holds appropriate admin-level access to configure integrations.
Policy and Governance — Customer’s internal security and IT governance requirements are defined and available prior to policy configuration sessions.

What’s Not Included

The following are outside the scope of this package:

On-site or in-person delivery (all sessions are remote)
EPM or Device Trust onboarding (covered by separate packages)
Managed or fully hands-on implementation (Customer retains responsibility for all system configurations)
Post-Service-Window support (available through 1Password’s Customer Success or support channels)
Any services outside this scope without a separately agreed Change Order

This Service Package description is governed by the applicable Professional Services Terms agreed between the parties.

Premier Gold

Service Package Description v1.0 | Effective Date: November 2, 2026

Overview

Premier Gold is a bundled service package that combines any two of the following three Premier Silver service packages: Enterprise Password Manager (EPM), Device Trust (Unified Access), and SaaS Manager. The specific combination included in a Customer’s Premier Gold package is set out in the applicable Order Form.

Pricing is set out in the applicable Order Form.

Available Service Packages

The following three Premier Silver service packages are available under Premier Gold. Customers receive two of the three, as specified in their Order Form:

Premier Silver — Enterprise Password Manager (EPM)

1Password’s highest-touch EPM onboarding package, designed for enterprise customers with significant deployment complexity. Includes a dedicated Project Manager, Technical Account Manager, Implementation Consultant, Executive Concierge, live training sessions, and in-depth technical workshops — delivered remotely within a 90-day Service Window.

Full service package description: Premier Silver EPM Service Package Description

Premier Silver — Device Trust (Unified Access)

1Password’s highest-touch Device Trust onboarding package, designed for enterprise customers deploying Device Trust (Unified Access) at scale. Includes a dedicated Project Manager, Technical Account Manager, Implementation Consultant, Executive Concierge, and technical/configuration workshops— delivered remotely within a 90-day Service Window.

Full service package description: Premier Silver Device Trust Service Package Description

Premier Silver — SaaS Manager

1Password’s highest-touch SaaS Manager onboarding package, designed for enterprise customers seeking a comprehensive SaaS visibility and governance deployment. Includes a dedicated Project Manager, Technical Account Manager, Implementation Consultant, Executive Concierge, and an expanded program of 10 configuration sessions — all delivered remotely within a 90-day Service Window.

Full service package description: Premier Silver SaaS Manager Service Package Description

Delivery

Each service package within Premier Gold is delivered independently, with its own Kickoff Date, Service Window, and project team. The two engagements may run concurrently or sequentially, as agreed between the parties at or before the first Kickoff Date.

Governing Terms

Each service package included in Premier Gold is governed by the applicable Professional Services Terms agreed between the parties and the relevant Service Package description.

Premier Platinum

Service Package Description v1.0 | Effective Date: November 2, 2026

Overview

Premier Platinum is a bundled service package that includes all three Premier Silver service packages: Enterprise Password Manager (EPM), Device Trust (Unified Access), and SaaS Manager. Customers purchasing Premier Platinum receive the full highest-touch onboarding experience for all three products, each delivered within its own Service Window under the applicable Professional Services Terms.

Pricing is set out in the applicable Order Form.

What’s Included

Premier Platinum includes the following three service packages, each governed by its own Service Package description:

Premier Silver — Enterprise Password Manager (EPM)

1Password’s highest-touch EPM onboarding package, designed for enterprise customers with significant deployment complexity. Includes a dedicated Project Manager, Implementation Consultant, Executive Concierge, Technical Account Manager, live training sessions, and in-depth technical workshops — delivered remotely within a 90-day Service Window.

Full service package description: Premier Silver EPM Service Package Description

Premier Silver — Device Trust (Unified Access)

1Password’s highest-touch Device Trust onboarding package, designed for enterprise customers deploying Device Trust (Unified Access) at scale. Includes a dedicated Project Manager, Executive Concierge, Technical Account Manager, Implementation Consultant, and technical/configuration workshops — delivered remotely within a 90-day Service Window.

Full service package description: Premier Silver Device Trust Service Package Description

Premier Silver — SaaS Manager

1Password’s highest-touch SaaS Manager onboarding package, designed for enterprise customers seeking a comprehensive SaaS visibility and governance deployment. Includes a dedicated Project Manager, Executive Concierge, Implementation Consultant, Technical Account Manager, and an expanded program of 10 configuration sessions — delivered remotely within a 90-day Service Window.

Full service package description: Premier Silver SaaS Manager Service Package Description

Delivery

Each service package within Premier Platinum is delivered independently, with its own Kickoff Date, Service Window, and project team. The three engagements may run concurrently or sequentially, as agreed between the parties at or before the first Kickoff Date.

Governing Terms

Each service package included in Premier Platinum is governed by the applicable Professional Services Terms agreed between the parties and the relevant Service Package description.

Additional TAM Hours

TAM Standard (5-Hour Increment)

Service Package Description v1.0 | Effective Date: November 2, 2026

Overview

The TAM Standard package provides a fixed block of five (5) Technical Account Manager (TAM) advisory hours, purchasable in 5-hour increments. The TAM Standard package may be purchased as a standalone engagement or alongside an existing Service Package or Statement of Work to provide additional technical advisory capacity. This is a one-time purchased block, not a recurring subscription or monthly allocation.

Pricing is set out in the applicable Order Form.

Package Summary

Purchased Hours — 5 hours per increment
Purchased Hours Window — 180 days from the Purchase Date
Rollover — None — unused Purchased Hours expire at the end of the Purchased Hours Window
Delivery — Remote only, unless on-site delivery is separately agreed in writing

Additional increments may be purchased at the then-current rate set out in the applicable Order Form.

What’s Included

Purchased Hours may be applied to any of the following TAM advisory activities, where they relate to Customer’s use of 1Password products and services:

Technical configuration guidance and advisory
Integration planning and integration advisory
Deployment planning and roadmap advisory
Technical enablement and training for administrators and key users
Architecture review and best-practice consultation
Security configuration review and recommendations
Workflow and documentation review
Proof-of-concept scoping and advisory
Escalation coordination and priority support routing (does not replace 1Password Support)

All activities must be agreed in advance with the assigned TAM and are subject to scheduling availability. Time spent on preparation, meetings, follow-up, async communication, and document review counts against the Purchased Hours. Where Customer has also purchased a Service Package or Statement of Work, activities must also fall within the scope of that engagement unless otherwise agreed in writing.

Usage Rules

Expiration. Purchased Hours are available during the Purchased Hours Window. Unused Purchased Hours at the end of the Purchased Hours Window expire and cannot be used, rolled over, or converted to another service.
Hour tracking. 1Password will track time consumed against the Purchased Hours and will use reasonable efforts to notify Customer when approximately four (4) hours have been consumed. Customer remains responsible for monitoring its balance and the expiration date.
Cancellations and no-shows. If a scheduled session is cancelled with less than five (5) business days’ written notice, or Customer does not attend, a minimum of one (1) hour will be charged against the Purchased Hours balance. Where 1Password cancels a scheduled session, no hours will be charged.
Additional increments. Additional hours require a new approved purchase of at least one 5-hour increment. Additional or out-of-scope work may not begin until written authorization is confirmed.

Deliverables

Advisory output from TAM Standard sessions may include written guidance, session notes, configuration recommendations, and documentation feedback. Any specific written output must be scoped and agreed before work begins. Time spent creating or revising any output counts against the Purchased Hours. Where Customer has also purchased a Service Package or Statement of Work, output from TAM Standard sessions supplements the Deliverables described in that agreement.

Customer Responsibilities

Customer is responsible for the following during any TAM Standard engagement:

Assign a named technical contact and make relevant stakeholders available for scheduled sessions
Complete agreed pre-work and action items prior to sessions
Provide access to relevant 1Password systems and documentation as needed
Notify the TAM of changes that affect priorities, access, or timing
Not request or accept out-of-scope work without a separately approved purchase or Change Order

Where Customer has also purchased a Service Package or Statement of Work, Customer’s responsibilities under that agreement continue to apply.

Assumptions and Dependencies

The following assumptions apply to all TAM Standard engagements:

Services will be delivered remotely unless on-site delivery is separately agreed in writing
Customer will provide access to relevant systems, documentation, and approved environments as needed
Third-party systems and dependencies may affect the timing or outcome of advisory work
All activities will relate to Customer’s use of 1Password products and services

Where Customer has also purchased a Service Package or Statement of Work, the assumptions and dependencies set out in that agreement also apply to TAM Standard sessions delivered in connection with it.

What’s Not Included

The following are outside the scope of this package:

Break-fix support and incident response (should be directed to 1Password Support)
Software development, scripting, or custom code creation
Managed or fully hands-on implementation work
Legal, compliance, or regulatory advice
Activities outside the 1Password product suite
On-site delivery unless separately agreed in writing
Services benefiting any entity other than Customer
Any out-of-scope work without a separately approved purchase or Change Order

Where Customer has also purchased a Service Package or Statement of Work, the exclusions set out in that agreement also apply.