Tenant isolation
Tenant context is scoped to the current database transaction, and tenant-owned tables enforce row-level security.
Security
Operating trust requires clear boundaries.
Orvaco is designed so access, authority and material actions remain explicit and traceable.
Capability-based access
People act through explicit capabilities assigned through their active organisation access.
Traceable changes
Material actions and state changes are recorded in an append-only audit trail.
Human authority
Orvaco can structure and route a decision. A human with the required authority still decides.
Claim boundary
Orvaco does not claim SOC 2, ISO certification or an external security audit. Further operational-security details are shared in the appropriate diligence context.