Trust
Security you can inspect
Orvix is built on isolation, short-lived secrets, and auditability. This page states what we do — and just as deliberately, what we don't claim.
Controls in place today
Tenant isolation, deny-by-default
Every request resolves ownership from the authenticated session. Customers can only see and change their own data; cross-customer access is refused by default and covered by automated IDOR tests.
Transient mailbox secrets
Mailbox passwords travel a short-lived secret handoff (minutes-long TTL, single-digit resolve limits) and are never written to the database, job payloads, logs, audit trail, or API responses.
Separated administration
Customer administration and internal operations use distinct, role-gated surfaces. Admin-only data — node credentials, secret references, private key material — never reaches customer APIs or pages.
Audited actions
Authentication, entitlement, provisioning, removal, and administrative actions are written to an audit log with actor, target, result, and timestamp — without secret values.
Encrypted connections
Portal and API traffic runs over HTTPS with strict transport policy in production, plus CSRF and origin verification on state-changing requests.
Explicit lifecycles
Provisioning, verification, and removal are state machines with visible states and guarded transitions — no silent half-finished operations, no destructive surprises.
Honest boundaries
Claims we deliberately do not make — because making them would require evidence we don't have.
| Topic | Our position |
|---|---|
| Compliance certifications | Orvix holds no SOC 2, ISO 27001, or HIPAA certification to advertise. We will say so if that changes. |
| Uptime guarantees | We publish no SLA percentage. Reliability work is continuous; guarantees will be written, not implied. |
| Message-content encryption | We do not claim zero-knowledge or end-to-end message encryption. Transport to our portals is encrypted; mailbox secrets are transient. |
| Residency geography | We state no residency geography. Enterprise buyers with residency needs should raise them directly. |
Report a concern
Found something that looks wrong? Account holders can reach support through the portal; prospective customers and researchers can use the contact page. Include what you observed, where, and when — please do not include passwords or private mail content.
Security that shows its work
Isolation, transient secrets, and audit trails are already running in every Orvix account. Try the setup and inspect the states yourself.