Support access on the record
If the Orbit team must open a conversation to help you, they give a reason, and every access is logged.
Security
Your data stays your data.
Sensitive work can happen in one place, with the controls your security team will ask about. Admins see how much AI is used, never what anyone said.
Privacy
Admins see how much. Never what.
Organization and team admins see people and usage, never content. Conversations stay private to the people who had them. Switch views to see the difference.
In Maya's view she sees her whole conversation. In the admin's view the words are hidden, and only usage shows: chats this week, tokens, and how much of the weekly limit is used.
Controls
The controls your security team will ask about.
Encrypted secrets
Model provider keys and connected-app tokens are encrypted at rest and never shown to users.
A full audit trail
Admin actions, from invitations to rule changes, are recorded with who did what and when.
Isolated web access
Web pages are opened on a separate network that can't reach your data, and unsafe addresses are refused.
Invite-only access
People join your organization by invitation only. There is no open sign-up into it.
Clean offboarding
Suspending someone ends their access at once. Their projects and files stay with the organization.
Self-hosting
Run it on your own servers.
Self-host the whole platform with your own database, for complete control over where data lives. Conversations and files never leave your infrastructure.
- Runs as containers on your own servers
- Your own database and file storage
- Your own model providers and routing
- Part of the Enterprise plan
Questions
What security teams ask us.
More questions? See all questions or write to us.
Can our admins read employees' conversations?
No. Organization and team admins see people and usage, never content. The only exception is support: if the Orbit team needs to open a conversation to help you, they must give a reason, and the access is recorded.
Can we host Orbit ourselves?
Yes. The whole platform runs as containers on your own servers, with your own database, so conversations and files never leave your infrastructure. Self-hosting is part of the Enterprise plan.
What happens when someone leaves?
An admin suspends their account. They can no longer sign in, and the projects and files they worked on stay with the organization.
Put every team on AI, on your terms.
Start your organization today, or talk to us about a rollout for every team.