- Home
- Security
How your data is kept, and who can touch it
A plain account of how Ordelume protects your workspace, what the AI can and cannot do with it, and how you take it with you.
Sign-in and roles
Every workspace sits behind authentication. Each person sees only the modules their role allows, and client workspaces are kept separate.
Passwords and keys
Passwords are hashed with PBKDF2-SHA256. AI provider keys and OAuth tokens are encrypted on the server and never sent to the browser.
A log of every change
Workspace changes and AI actions are recorded with who, what and when, in the activity feed and the AI decision log.
AI under your rules
You set the autonomy level. Employment, legal, security, payroll and major commercial decisions always need a person to approve.
Not used for training
Your workspace data is not used to train AI models. With your own key, AI calls go to your provider account.
Yours to take
Export any table to CSV. Ask, and your workspace is deleted. Self-hosting is available for teams that need it.
Documents
The paperwork a procurement team asks for, published and public.
Questions about security?
Book a call and I will walk you through how your data is handled, or send your questionnaire and I will answer it.