Security
Private by default
Orbi only sees what you connect, only acts when you approve, and forgets what you tell it to. This page explains how, in plain words.
Four promises
How an action happens
Three steps, every time. There is no shortcut, also not for us.
You connect a tool
Read-only by default. Write access is a separate, explicit step.
Orbi prepares, you approve
Drafts, plans and chases wait for your ok before anything leaves.
Everything is logged
Every action, with time, source and what changed. Export any time.
Compliance
GDPR
Data stays in the EU. Data processing agreement available for every plan.
In place
SOC 2 Type II
Audit in progress with an independent firm. Report available on request.
In progress
ISO 27001
Controls mapped and documented. Certification planned after SOC 2.
In progress
Pen tested yearly
External penetration test every twelve months. Summary shared on request.
In place
Questions
In Frankfurt, on EU infrastructure. Backups stay in the EU too.
Nobody by default. Support access needs your one-time approval and expires after 24 hours.
No. Your content is only used to do the work you ask for.
Everything is removed within 30 days, including backups. You get a confirmation mail when it is done.