Internal North America Analytics Platform

t2ó ONE is the platform where t2ó North America runs its marketing intelligence.

A secure, role-based hub for real-time marketing performance dashboards, campaign analytics, and executive reporting across t2ó's client portfolio. Built and operated by t2ó North America for our team and our authorized client stakeholders.

What it does Access & security

What t2ó ONE does

One platform, multiple domains of marketing performance analytics — unifying data from Segment CDP, Google Ads, Meta Ads, DV360, GA4, and first-party point-of-sale systems into dashboards and reports accessible to authorized users only.

📊

Client dashboards

Real-time marketing performance dashboards for each of our clients, with drill-down into channels, campaigns, locations, and funnel stages.

📈

Executive reporting

Executive summary views, monthly reports, and business-review decks generated directly from BigQuery pipelines with LLM-assisted narrative.

🔄

Pipeline monitoring

Continuous data-quality checks, ingestion watchdogs, and reconciliation reports that keep client-facing numbers honest.

🎯

Campaign operations

Multi-tenant paid-media operations across Google Ads, Meta, and DV360 with audit trails and change logs.

🔗

Data pipelines

Managed ingestion from Segment, RepairQ, Q-Site, Shopify, Zoho, and other client-facing systems into BigQuery for governed reporting.

🤖

AI analyst tools

Eugen.ia and internal AI utilities that let the t2ó team query, summarize, and interpret client data efficiently.

Access & security

t2ó ONE is a private application. It is not a public-facing service. All access is invitation-only and gated by role-based permissions after successful Google authentication.

Who can sign in

Sign-in is restricted to two categories of users:

  • t2ó staff with a company Google Workspace account (@t2o.com)
  • Named client stakeholders explicitly invited by the t2ó account team
  • Every access grant is issued individually — there is no self-registration
  • Access is revoked immediately when engagements end or roles change

How authentication works

The platform uses Google OAuth for identity verification and Clerk for authorization:

  • Google verifies the user's email identity (OAuth 2.0)
  • Clerk checks the user's role and permissions before granting access
  • Users without an explicit entitlement are shown a "no access" page
  • Client users see only the dashboards they are authorized for
  • All actions are audited server-side

Support & contact

For access requests, questions about permissions, or issues with the platform, contact the t2ó North America team. New client access is coordinated by your account lead.