Legal

Security at Orqana AI

Agents touch real systems, so access has to be narrow, visible, and revocable.

Data protection

Traffic is encrypted in transit and data is encrypted at rest. Access to production is restricted and reviewed.

Access model

Integrations are connected at the workspace level and attached per agent. Disconnecting a provider revokes it from every agent immediately, and every run is written to your activity log.

  • Per-agent integration scope
  • Immediate revocation
  • Full run history

Reporting a vulnerability

Email security@orqana.ai with steps to reproduce. We acknowledge reports within one business day and will not pursue good-faith researchers.

Describe your first agent today

Free to start. No credit card, no setup calls, no engineering ticket.

Get started free