Trust & Security

Trust Center

At ORDR, we're committed to maintaining the greatest levels of privacy, security, and moral accountability. Our dedication is proven by our strict adherence to industry-leading certifications and guidelines, which guarantees that our clients may entrust us with their most private data.

Accreditations & Adherence

Our commitment to compliance and privacy

AICPA SOC

SOC 2 Type 2 Accreditation

We have obtained SOC 2 Type 2 accreditation, demonstrating our commitment to putting strong measures in place to protect the confidentiality of customer data.

See more

Privacy Compliance

ORDR ensures that personal data is treated with the highest care and in compliance with all relevant rules by adhering to the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

See more

AI Ethics

Strict ethical standards are followed in the development and upkeep of our AI systems, guaranteeing accountability, transparency, and justice in all automated judgments.

See more
Security Approach

Multi-layered security approach

Technical Controls

Implementation of advanced encryption protocols, intrusion detection systems, and regular vulnerability assessments to protect data integrity and confidentiality.

Organizational Controls

Establishment of clear data protection policies, regular staff training on data privacy, and assignment of dedicated personnel responsible for overseeing compliance efforts.

Procedural Controls

Development and enforcement of procedures for data handling, incident response, and continuous monitoring to promptly address potential security events.

Read our Security & Privacy FAQs
AI Security

ORDR IQ – Enterprise AI Security & Confidentiality Policy

ORDR is committed to delivering AI that meets the highest standards of security, privacy, and enterprise readiness. ORDR IQ works with any large language model that offers enterprise-grade licensing with strong guarantees around data protection, confidentiality, and zero data retention. Customers can bring their own LLM or AI infrastructure and configure it directly through the ORDR UI.

ORDR IQ uses secure, enterprise-grade AI capabilities to deliver intelligence and automation across your environment while keeping your data private, protected, and fully under your control. All AI processing is handled with strict confidentiality, and customer data is never used to train external models.

Security Architecture

Access Control

  • Access is restricted to authorized ORDR personnel and designated customer users only
  • Integrated Single Sign-On (SSO) with strong identity verification
  • Role-based access controls consistent with enterprise governance policies

Infrastructure

  • ORDR IQ operates in an isolated private-cloud environment
  • Segmented from public-facing networks
  • Hosted on enterprise-grade, SOC 2 Type II–certified infrastructure
  • Built with industry-standard AI security protocols

Data Protection

Zero Data Retention

  • Zero Data Retention (ZDR) is always enabled
  • No prompts, responses, or metadata are stored by the AI provider
  • No data is used for AI model training—ever

Confidential Processing

  • All input is processed in real-time only
  • Data is immediately deleted after computation
  • No persistent storage of sensitive information
  • Data is never shared with third parties or used outside the customer environment

Confidentiality & Compliance Guarantees

Data Lifecycle

  • Data exists only during active processing
  • Automatic, instant deletion post-processing
  • No long-term logging, caching, or replication

Compliance Alignment

  • Supports enterprise security and governance frameworks
  • Aligns with customer regulatory requirements (HIPAA, PCI, SOX, NERC, etc.)
  • Detailed audit logs available for access, usage, and administrative actions

Risk Mitigation Controls

  • No exposure to external or unapproved APIs
  • End-to-end encrypted data transmission
  • Continuous monitoring and security telemetry
  • Periodic internal and external security assessments
Coming Soon

Upcoming certifications

ISO 27001:2022 Certification

Our comprehensive information security management system and our dedication to ongoing improvement in protecting information assets will be further validated by the ISO 27001:2022 accreditation that we will pursue soon.

Documentation

Legal & policy documents

End User License Agreement

Our End User License Agreement defines the legal terms for using ORDR's software and services. We encourage you to read these terms to maximize the value of our industry-leading platform while understanding your rights.

View document

Security Policy

ORDR implements robust security measures designed to protect your data's confidentiality, integrity, and availability. Our comprehensive approach follows industry best practices to safeguard your sensitive information while ensuring compliance with all relevant regulations.

View document

QTS Compliance

Please see ORDR's QTS Compliance matrix as it pertains to our data center usage. This matrix identifies and maps out the compliance requirements for various data center services, including security, availability, and confidentiality, against relevant regulations and industry standards.

View document
Our Dedication

We are aware of how vital trust is to our partnerships and client relationships. By following these strict guidelines and regularly assessing our procedures, we make sure that ORDR continues to be a dependable and secure partner in the ever-changing digital world of today. Please get in touch with us directly for more specific information on our compliance programs, security procedures, or ethical standards.

If you have any questions regarding this information, feel free to reach out to security@ordr.net