Security & Privacy

At ORI, we take data security and privacy seriously and employ advanced measures to protect your precious digital assets. Our data team has significant experience building compliant, resilient, and secure data architectures so we can deliver the best possible service with the lowest possible risk.

Privacy
‍ORI ensures maximum data privacy both on the backend and throughout your organization. Manage all user permissions at the global and data levels, down to the row and column, to control who has access to which parts of your ORI Excellence Platform instance.
‍

Security
‍ORI protects your data on the backend with best practices for data architecture and database security, including background checks and mobile device management for ORI employees and AWS S3 storage and server-side encryption all the way to the root level. On the user side, ORI employs multi-factor authentication and other industry best practices to give you peace of mind.  With ORI’s Kinetic Data Engine, your data is encrypted in storage and in transit. We strictly follow SOC2 Type 2 processes, including multi-factored authentication and employee background checks, so you can have peace of mind that your data is secure.

Compliant with global regulations

SOC2 Type 3
‍ORI has a current System and Organizational Controls 2 Type 2 certification, resulting from independent audits to ensure customer data privacy, security, and integrity.
‍
‍ GDPR
‍ORI follows data protection and privacy standards laid out in the European General Data Protection Regulation (GDPR).

CCPA
‍ORI does not sell data and follows the consumer data privacy standards laid out in the California Consumer Privacy Act (CCPA).

Does ORI sell data?
‍No, ORI doesn’t sell data and never uses customer data for any purpose other than providing customers with easy, real-time access to data insights in the ORI Excellence Platform.

Does ORI sell customer data to advertisers?
‍No, ORI never sells or shares any customer data or contact information to any third party for any reason. ORI does not sell advertising.
‍
What kinds of data does ORI collect?
‍ORI ingests data files from customers in order to power the ORI Excellence Platform for authenticated users with approved access to that data. ORI never scrapes data and ingests only data from sources provided by customers for the express purpose of powering the ORI software experience.

Does ORI use customer data to train AI?
‍ORI uses discrete AI applications in the platform software experience but does not use customer data to train large language models (LLMs) or other AI algorithms. All customer data is kept strictly secure and private and is never used for any external or third-party application.

Will ORI ever disclose my personal data?
‍Under certain provisions of U.S. law, ORI may be compelled by subpoena, court order, or search warrant to disclose personal data. ORI will never turn over any data without a valid legal process compelling us to do so and will use any applicable protections under U.S. law to avoid doing so. ORI will never voluntarily disclose any information to any government agency.

Will ORI disclose requests for customer data?
‍Yes, ORI will promptly inform customers of any requests for data by government officials or related entities unless restricted by a binding court order.

Security & Privacy

Get a free demo of the ORI Excellence Platform