Data access designed around control.

Account and organization controls restrict business records to authorized organization members. Server-side membership and role checks are applied to protected operations.

A user must explicitly authorize each available external connection. Current Gmail and Google Calendar connections request read-only access and do not permit ORIVIS to send, delete, or modify messages or events.

External connection references are handled by server-side services. Sensitive connection material is not presented in the ordinary browser interface.

ORIVIS distinguishes source facts, calculated values, estimates, and interpretations. Where available, findings retain source references and calculation context so a person can review the basis for a recommendation.

ORIVIS can identify a finding and prepare a recommendation. External business actions require authorization rather than executing automatically.

This page describes current product controls; it does not claim a security certification or independent audit. To report a security concern, use the contact page and avoid including passwords or access tokens.