Two checkpoints
Before sending: we check for sensitive data. Keys and connection strings leave as placeholders. Public shares hide sensitive details automatically.
Before anything acts: key actions wait for you. Offline by default; each connection approved once, then revoked. Email and writes to outside systems run only after you approve. Destructive commands are stopped before they run.
Foundations
Encryption & key protection. Credentials are sealed with AES-256-GCM and bound to identity. Traffic is encrypted end to end; keys never reach the agent.
Data residency & governance. Deployed regionally in Singapore, with clear rules for storage, retention, deletion and cross-border transfer.
Zero-trust execution. gVisor sandboxes and least privilege keep access closed by default; every external action is authenticated and policy-checked.
International standards. Built to align with frameworks for information security, AI governance and service audits, from access control to activity audit.
Found a security issue? Email support@ordeum.ai with “Security” in the subject.