Your traces stay yours
We treat your agent telemetry with the same care you put into your evals. Here is what that means in practice.
Encryption at rest and in transit
All trace data and eval results are encrypted at rest with AES-256 and in transit over TLS 1.3. Credentials are never logged.
EU data residency
Orq is incorporated in the Netherlands and processes data within EU infrastructure. Your trace data does not leave European data centres.
API key scoping
Each project has its own API key. Keys are hashed on storage. You can rotate or revoke any key from the dashboard at any time.
No LLM provider credential storage
Orq never asks for your OpenAI or Anthropic keys. You pass those directly from your own environment. We only receive the trace metadata you choose to send.
Role-based access control
Invite team members with viewer or admin roles. Gate approval in CI can be scoped to specific reviewers per environment.
Responsible disclosure
Found a vulnerability? Email us at [email protected] with a detailed report. We aim to respond within 48 hours.