Trust Center
How OrbitOS protects your workspace. We describe controls we actually run — we don’t claim certifications we don’t hold.
Tenant isolation
Every table is protected by Postgres row-level security keyed to workspace membership and role. Billing records, audit logs and plan fields have no client write path at all. These policies ship with an automated test suite that exercises cross-tenant reads and writes, role escalation and expired-workspace behavior.
Authentication
- Email and password, Google Workspace, Microsoft Entra ID, and SAML SSO (Enterprise).
- Passkeys (WebAuthn) and authenticator-app two-factor; owners can require two-factor for owners and directors.
- Configurable inactivity timeout.
Auditability
Sign-ins, failed sign-ins, role changes, exports and billing events are written to an append-only audit log your auditors can read and export.
Payments
Payments run through IntaSend. Webhooks are verified and every payment status is re-confirmed with IntaSend before it changes your plan.
Your data, your exit
Owners can schedule deletion of their workspace at any time. On Enterprise they can also download a full archive first.