Skip to content
Book a map

Security

Built to clear
your security review.

What we hold, where it lives, who can see it, and how we prove it. On one page, for your security team.

AICPA SOC 2Security statusUpdated October 2026
  • SOC 2 Type IComplete · Jul 2026
  • SOC 2 Type IIIn observation
  • Each client walled offIn the database
  • Multi-factor sign-inEvery user
  • EncryptionIn transit and at rest
  • HostingUnited States

How your data is handled

Follow one file through Orbit.

From the export you send to the figure on the board pack, nothing is edited, mixed or lost.

Your company / Data / ledger_export_sep2026.csvFollowing one file
  1. 01ReceivedKept exactly as you sent it, fingerprinted, never edited.
  2. 02Walled offIn your company's own wall, enforced by the database.
  3. 03CalculatedArithmetic on your own books. No AI in the figures.
  4. 04PublishedLocked once published. A correction is a new version.
  5. 05RecordedEvery change logged in storage that can't be edited.

Who can see it

Only the people you name.

Every permission is granted on purpose and listed. Anything not granted is refused.

People4 members
  • ARAna RuizTreasurerOwner
  • JOJo OrtizControllerAdmin
  • TBTom BeckerFP&AAnalyst
  • LPLee ParkCFOViewer
Signing inEnter the code from your app

You choose who sees what.

Four roles, from viewer to owner. Every sign-in asks for a second factor.

RequestExposure · another client
Access refusedRecorded 09:14:22

Refused, never quietly empty.

No access means a clear no, never a blank screen.

  • 09:15Jo O. uploaded ledger_export_sep2026.csv
  • 09:02Ana R. made Tom B. an Analyst
  • 08:47Ana R. invited Lee P. as Viewer

Every change on the record.

Who changed what, and when, written once and kept.

DemosFictional companies only.

Nothing you send ever appears in a demo.

FiguresNo AI in your numbers.

Every figure is arithmetic you can rerun.

IndependenceNever your counterparty.

We never trade with you or sell you a hedge.

Where it runs

Hosted in the United States, built to stay up.

Encrypted in transit and at rest, with a standby database and a nightly backup kept apart.

  1. Your teamMulti-factor sign-in
  2. Edge firewallFilters every request
  3. OrbitUnited States · two instances
  4. DatabaseEncrypted · standby copy ready
  5. Nightly backupEncrypted · kept apart

Your security review

Your security team can start on day one.

The review runs alongside the pilot, not before it.

  1. 01Ask for the packWe send it under NDA.
  2. 02Send your questionnaireWe fill it in for you.
  3. 03Start the pilotYour review carries on beside it.
Orbit security packFor your security and procurement teams
  • PDFSOC 2 Report
  • PDFArchitecture and data flow
  • XLSXSubprocessors
  • PDFSecurity policies
Request the security pack