Orvoq is designed for enterprise use from the ground up — every screen you'd expect an IT or security team to ask about already exists as a real control, not a promise on a slide.
Roles at the Organization, Workspace, and Session level — the most restrictive applicable role always governs. A contractor sees the one session they're on, never your whole company's conversations.
Every state-changing action — a decision, a permission change, an agent's tool call — is traceable to an actor and a timestamp. Session Replay reconstructs exactly what happened, on demand.
Every agent's permissions are visible up front. Anything with a real external effect — sending a message, publishing, spending — waits for a human by default.
Data is encrypted at rest (AES-256) and in transit (TLS 1.2+). Encryption keys are managed separately from application data.
Choose a storage region per organization — US or EU today, more available on Enterprise plans. Set at the org level so it can't drift out of sync with a workspace-level setting.
Optional automatic redaction of common PII patterns before storage, configurable per workspace — on by default for templates like Sales & GTM where customer data enters immediately.
SAML/OIDC single sign-on and SCIM provisioning on Enterprise plans. When SSO is enforced for your domain, password and social login are automatically disabled for anyone matching it — regardless of which login method they try.
A shareable session link grants access to that session only, as a time-boxed guest — never silent workspace membership. Any broader access is an explicit, off-by-default choice.
This page is the summary. For the full technical detail — tenant isolation architecture, encryption specifics, our secure development pipeline, and compliance mapping — see the complete Trust Center.
Visit the Trust Center →