TRUST & SECURITY
Enterprise-grade security. For your business.
Orb never sends, books, or replies without your yes — and never trains its models on your data or your clients'.
What the certifications actually mean
ISO 27001Certified
Independently audited, every year, for exactly this: how we store and protect data.
GDPRCompliant
Your clients’ data stays under EU protection rules wherever you and they are.
CASA Tier 2Certified
Vetted by Google Cloud’s own security assessment for apps handling sensitive data.
SOC 2In progress
An independent audit of our security controls, underway now.
How your data is actually handled
Encrypted everywhere— TLS 1.2+ in transit, AES-256 at rest.
Sign in with Google or Microsoft— no new password for Orb to leak.
EU data residency by default— your data stays in the EU unless you choose otherwise.
Never trains on your data— your and your clients’ details are never used to train Orb’s models.
You control what’s connected— disconnect any tool at any time from your settings.
Your explicit approval, every time— nothing sends, books, or pays without you.
Review our Trust Center for more details
Who’s behind it
Orb is built by a team with backgrounds at Revolut and Trade Republic — companies that had to get data security right at a much larger scale, long before Orb existed. That's the standard the certifications above hold us to.