Security
Built multi-tenant from day one. Database-level isolation. Audit trails on every change. No shortcuts on the things that matter.
The audit log — every change, every actor, every diff. Immutable and queryable.
Every workspace is logically isolated at the database row level. Tenants cannot read or write to each other's data — enforced by PostgreSQL Row Level Security policies, not by application code. Even if a bug ships, the database refuses to leak.
Email + password with bcrypt hashing, or SSO via OAuth (Google, Microsoft). Sessions are JWT-based with short expiry. Magic-link sandbox access for trials.
Role-based: admin, project manager, installer, city/read-only. Permissions enforced server-side in every API call, not just in the UI.
Every mutation writes a before/after snapshot to an immutable audit log. Soft deletes only — nothing is destructively removed. Pull the history of any record in two clicks.
TLS 1.3 in transit. AES-256 at rest. Database backups encrypted with separate keys, replicated across regions.
Continuous point-in-time recovery to any second in the last 30 days. Daily snapshots retained 90 days. Tested quarterly via full-restore drills.
Your data is yours. Export to CSV, JSON, or via API any time. If you leave Orbit, we provide a final export and delete your data within 30 days.
No SSNs, no payment card data stored. Customer addresses, names, and contact info encrypted at rest. Field photos stored in private buckets with signed-URL access only.
We use Vercel (hosting), Supabase (Postgres + auth), Twilio (SMS), Anthropic & OpenAI (AI features). Full subprocessor list available on request — we notify you 30 days before any addition.
SOC 2 Type II in progress (target Q3 2026). HIPAA not in scope — Orbit is not a covered entity. We complete vendor security questionnaires on request.
Critical incidents acknowledged within 1 hour, customers notified within 24. Post-mortems published for every customer-affecting incident. Status page at status.orbitwork.io.
Email security@orbitwork.io. We respond within 24 hours and acknowledge legitimate reports publicly.
Questions about security or compliance? Procurement and IT teams can request our SIG-Lite or CAIQ-Lite questionnaire at security@orbitwork.io. We respond within one business day.