Verifiable, not claimed.
Security reviewers should not have to take our word for anything. Here are the certificate numbers, how we protect data, and what we send on request.
Certificates
| Standard | Certificate | Valid to | Verify |
|---|---|---|---|
| ISO/IEC 27001:2022, information security | II-24051001 | IAF CertSearch ↗ | |
| ISO 9001:2015, quality management | IQ-24051002 | IAF CertSearch ↗ |
Registrar: ISPL Cert (Intercontinental Systemcert).
How we protect data
- Encryption in transit and at rest.
- Tenant isolation.
- Role-based access.
- A full audit log of every action.
- Approval gates for sensitive automated actions.
Where data lives
Shared cloud, dedicated environment or on-premise, chosen by the client. For European clients, shared and dedicated environments are hosted in the EU.
Our commitment on data
Client data is never used by OrNsoft to train any model. Third-party models are used under API terms that exclude training on client data.
People keep the final say
Your people keep the final say. Your team defines what the system may do autonomously and which actions require approval.
Security built in
Our platforms are protected by AI web application firewall technology we built from 2019 and brought in house with the acquisition of AppliSafe in 2024. It detects injection, cross-site scripting and other web attacks before they reach the application.
Available on request
- Data processing agreement
- Completed security questionnaires
- Certificate PDFs