Orvoq has not completed a SOC 2 or ISO 27001 audit — no formal certification exists yet. Our technical controls (tenant isolation, encryption, access management, audit logging, and a secure development pipeline) are built to align with SOC 2 Trust Services Criteria and ISO 27001 Annex A, and certification is a planned milestone as we scale, not a current claim.
In the meantime, we're glad to complete a security questionnaire directly or share documentation of our actual controls — reach out to our security team rather than requesting a report that doesn't exist yet.
See the full Trust Center for the complete picture on encryption, isolation, and governance controls.
Was this article helpful?