Security
Built for money and people data.
Agents can only do what a person could. Everything they do is limited, approved and recorded.
Isolation
- Each company is walled off in the database by Postgres row-level security. If code forgets to set the company, it sees nothing.
- The app's database role cannot bypass those rules, and the service refuses to start if it could.
- Every new table in Orbit ships with a test proving one company cannot read another's rows.
Approvals and limits
- Every person has a role and an approval limit. Above it, a second person decides, and nobody approves their own request.
- Agents have their own permissions and spending limits. Nobody gains powers by delegating to an agent.
- Owners can cap how much is paid to any one party in 24 hours.
Audit
- An append-only event store records who acted, why, and which approval allowed it.
- Events and journal tables reject updates and deletes. Corrections are reversing entries.
- Orbit audits rating changes, approvals, calibration moves, exports and permission changes.
Sign-in and secrets
- Two-step sign-in with an authenticator app, and SAML single sign-on on Smartacy Enterprise.
- API tokens are stored only as hashes. Switching someone off ends their sessions immediately.
- Per-company secrets in Orbit use envelope encryption with a key from your cloud's key service.
AI and personal data
- Orbit masks names, emails and phone numbers before any text reaches an AI provider, and AI suggestions never become final without a person.
- Marvis keeps no names, phones, emails or national IDs in its model. Contact details are read live at send time.
- Smartacy caps the AI tokens agents may use each month, so a runaway agent cannot run up a bill.
Where it runs
- Marvis runs in our cloud or yours. Orbit runs as multi-tenant cloud or on your own servers.
- Austy keeps its data on your Mac, with keys and connections encrypted by the macOS keychain.
- Smartacy has a tested backup, isolated recovery and failover procedure.
Certifications
Our products are in pilot and early access, and we do not hold formal certifications yet. If your security team has a questionnaire, send it to us and we will answer it in full.
Questions from your security team?
We will walk them through the architecture.