Skip to content
Security

Your traces stay yours

We treat your agent telemetry with the same care you put into your evals. Here is what that means in practice.

Encryption at rest and in transit

All trace data and eval results are encrypted at rest with AES-256 and in transit over TLS 1.3. Credentials are never logged.

EU data residency

Orq is incorporated in the Netherlands and processes data within EU infrastructure. Your trace data does not leave European data centres.

API key scoping

Each project has its own API key. Keys are hashed on storage. You can rotate or revoke any key from the dashboard at any time.

No LLM provider credential storage

Orq never asks for your OpenAI or Anthropic keys. You pass those directly from your own environment. We only receive the trace metadata you choose to send.

Role-based access control

Invite team members with viewer or admin roles. Gate approval in CI can be scoped to specific reviewers per environment.

Responsible disclosure

Found a vulnerability? Email us at [email protected] with a detailed report. We aim to respond within 48 hours.