Security
How we protect your data.
The same practices protect data in every Orveon product: encryption in transit and at rest, least-privilege access, reviewed providers and a published way to report a vulnerability.
01Practices
What we do with data, and what we never do.
One set of engineering standards applies to every Orveon product. Where a practice belongs to one product, or to this website, it says so.
Encrypted in transit and at rest
Data in transit is encrypted with TLS, and databases and backups are encrypted at rest. Integration tokens are also encrypted at the application level before they are stored.
Least-privilege access
Production access is limited to the people who run each product and this website. They sign in with company accounts and multi-factor authentication.
Isolated per workspace
In Radar, each workspace's data is kept separate inside the database. A workspace can also have a database of its own.
Read-only connections
Radar reads the tools you connect and never writes back to them. You choose which projects it sees.
No advertising, no data sales
We run no advertising trackers and never sell personal data. On this website, analytics runs only with your consent.
02Responsible disclosure
Found a vulnerability? Tell us first.
Email security@orveon.ai with the steps to reproduce the issue. We acknowledge reports within 2 working days and keep you updated until the issue is fixed.
Please do not access or change other people's data, disrupt the service or publish details before a fix is out. Good-faith research within these limits is welcome, and we will not take action against it.