Security

Your knowledge, protected by design.

Ordavium holds your documents, drafts and signatures, so we treat permissions, sessions and auditability as part of the product, not an add-on. Here is exactly what we do.

Access control

Workspace roles: owner, admin, member and viewer. Viewers can read but never change anything.
Matter roles on top: viewer, contributor and manager, granted per matter.
Restricted matters open only to the people named on them. Closed matters become read-only.
Every request is scoped to one workspace and checked against the caller's role on the server.
Search and answers only draw on documents the person asking can open. If access is removed later, past answers that used those documents are hidden.

Sign-in and sessions

Passwords are hashed with Argon2, never stored or logged in readable form.
Sessions use secure, httpOnly cookies that scripts can't read: a 15-minute access token and a refresh token that rotates on every use.
Each device's session can be seen and signed out from account settings. A password reset signs out every session.
Changes require a CSRF token. Sign-up, sign-in and password reset are rate limited, with optional CAPTCHA.

Data protection

All traffic is encrypted in transit with TLS.
Members' own model API keys are encrypted at rest with a key held outside the database.
Original files are kept in private object storage and are only served to signed-in members with access.
Read-only share links show one draft, are excluded from search engines and send no referrer.

Tamper-evident audit trail

Sign-ins, permission changes, approvals, exports and signatures are recorded with who, what and when.
Each entry is chained to the previous one with a keyed hash. The key is not stored in the database, so an edited or deleted entry breaks the chain and shows up when the trail is verified.
Kept for up to seven years.

AI and your data

Your documents, questions and drafts are never used to train AI models.
We use model providers only on terms that stop them training on or keeping your data beyond what's needed to return a result.
Drafts cite the passages they came from, and only approved drafts can be exported or sent for signature.
Workspaces can use their own API keys or, on Business, a private model endpoint. Requests to private network addresses are blocked unless explicitly allowed.

E-signing

Signers confirm their email address with a one-time code before a document opens.
Each signature records the time, email address and IP address in the document's history.
The signed PDF comes with a certificate of completion and is filed back in the matter.

Retention

Your documents and drafts: until you delete them or close your workspace.
Private questions and search history: 90 days.
Notifications: 90 days. Activity feed: one year.
Audit trail: up to seven years.

Details are in our privacy policy.

Report a vulnerability

If you think you’ve found a security issue, email support@ordavium.pro with the details and how to reproduce it. We’ll reply within two working days, keep you updated, and won’t take action against good-faith research that avoids other people’s data.

Bring your team's knowledge into order.

Set up a workspace in minutes, upload a handful of docs and ask your first question.

Start free See pricing

14-day free trial on every plan. No card needed.