Tenant isolation
Organisation scope is derived from verified identity and membership context. Repository predicates and forced PostgreSQL row-level security provide separate layers of tenant isolation.
Security and trust
Trust comes from product behaviour, not a badge.
Oryntela is designed to keep organisations separate, evidence traceable, consequential actions reviewed and customer-facing material deliberately selected.
Role-aware access
Administrative and high-consequence workflows use explicit role checks. Missing organisation or membership context fails closed.
Human approval
Suggested claims, customer communication, CRM write-back and Closed-Won Handover remain reviewable. Oryntela does not let an internal inference approve its own consequence.
Credential protection
Connector credentials use AES-256-GCM envelopes with tenant- and connection-bound associated data. Token material stays out of browser contracts, logs, audits and exports.
Buyer-safe Deal Rooms
Deal Room links use high-entropy one-time token delivery with only a SHA-256 digest stored. Published snapshots are read-only, positive allow-listed, revocable and excluded from search indexing.
Data minimisation
Oryntela separates customer Evidence, seller judgement, public research and generated material. It does not copy private deal intelligence into buyer views automatically.
Clear boundaries
We will not claim assurance that does not exist.
No SOC 2 claim
No ISO 27001 claim
No penetration-test claim
No Australian data-residency claim
No production provider is active
No customer data is in the current build
Export and deletion
Data lifecycle workflows are built into the product.
Organisation-scoped export and reviewed deletion workflows cover current product data. Production retention, backup expiry and provider-processing terms must still be approved and published before customer data is accepted.
Ask a security question
Get a direct, evidence-based answer.
We would rather explain an implemented control and its limits than hide behind broad security language.
[email protected]Looking for legal notices? The current repository does not yet contain owner-approved public Privacy or Terms content. See the honest status on the Privacy and Terms pages.
14-day trial · Complete
Bring security and commercial questions into the first conversation.
No card required. No automatic charge. No automatic conversion. Public self-service activation remains closed until launch readiness is complete.