Trust and security
Governance built into the platform.
Ordanex is designed so that every change is tested, approved and recorded. Here is how the platform protects your data and your partners' connections.
How we protect your data
Security practices in the platform.
Staging before production
Partner and configuration changes are prepared and tested in a staging environment and promoted to production only with authorized approval.
Managed secrets
Connection credentials are held in a managed secret store. Configuration holds references, never the credentials themselves.
Tenant-scoped access
Customer data is scoped to the customer's tenant, and access is controlled by role.
Append-only audit
Transaction and configuration history is recorded in an append-only, hash-chained audit ledger.
Account protection
Password complexity rules, account lockout after repeated failures, and protection against cross-site request forgery.
Cloud infrastructure
Ordanex runs on Amazon Web Services, with production and staging separated.
Certifications
Plainly stated.
Ordanex does not currently hold SOC 2, ISO 27001 or any other third-party security certification or attestation. We will say so here when that changes, and we are happy to answer security questionnaires as part of an evaluation.
Report a concern
Security contact.
If you believe you have found a security issue in Ordanex, please email hello@ordanex.ai. Please do not test against customer data or disrupt the service.
Evaluating Ordanex?
We will walk your security and architecture teams through how the platform handles data, credentials and change.