Orbit / Security & privacy

Security & privacy

Your data: isolated, exportable, and yours.

The honest answers to the questions a careful buyer asks. What Orbit does to keep your data safe, and what happens to it if you ever decide to leave.

How your data is kept

Six things we can show you, not just say.

Isolated per companyAccess rules enforced in the database keep every company's data separate, tested by 27 cross-tenant probes that all pass.
Encrypted & backed upData is encrypted in transit and backed up automatically, so a bad day does not become a lost month.
GDPR-readyExport, erasure, retention and a record of processing, with sensitive records marked and consent kept.
No lock-inEvery list and report exports, and the database is standard PostgreSQL, so your data can always leave with you.
Roles & approvalsPermissions you design per company, and high-value actions gated by approvals the database enforces, not the browser.
It leaves a trailAn audit log of who did what, a data health check that runs twelve reconciliations, and nightly checks on the money itself.

The fair question

“What if you disappear?”

It is the right thing to ask a young company, and the answer is not a reassurance, it is a fact. The database underneath Orbit is standard PostgreSQL, every list and report exports, and the privacy page shows exactly how to take everything out. Your business runs on your data, and your data is never trapped here.

Straight about certifications

Orbit holds no external security certification, and we will not pretend otherwise. We would rather show you the isolation test running than wave a badge. If a certification is a hard requirement for you, tell us and we will be honest about where we are.

Answers

Security and privacy, answered plainly.

Is my data isolated from other companies on Orbit?
Yes. Every company's data is kept separate by strict access rules enforced in the database, not just in the browser. That isolation is tested by a suite of 27 cross-tenant probes that all pass, and the test is kept so it can be re-run.
Is Orbit GDPR compliant?
Orbit is built GDPR-ready: you can export a person's data, erase it, set retention, and keep a record of processing, and sensitive records can be marked and consent recorded. We do not hold an external certification, so we describe what Orbit does rather than claim a compliance badge.
Can I export or delete all of my data?
Always. Every list and report exports, and the database underneath is standard PostgreSQL, so your data can leave with you in full. The privacy page sets out how to request an export or an erasure.
What happens to my data if Space Work disappears?
A fair question for any young company. Because the database is standard PostgreSQL and everything exports, you are never locked in. You can take a full copy of your data out at any time, so your business does not depend on us being here.

Ask us the hard questions.

Book a demo and bring your security checklist. We would rather answer it plainly now than have it surface later.