Security

Our Commitment

ORIVEN takes the security of your data seriously. We implement industry-standard practices to protect your information and ensure the integrity of our platform. Security is a continuous practice, not a one-time effort.

Infrastructure Security

• Hosted on enterprise-grade cloud infrastructure with high availability
• Data stored via Supabase with row-level security policies enforced at the database level
• Automated backups with point-in-time recovery capability
• DDoS protection and rate limiting on all public endpoints

Data Encryption

• All data in transit is encrypted using TLS 1.2 or higher
• Passwords are hashed using industry-standard algorithms and never stored in plain text
• Payment data is handled exclusively by Stripe (PCI-DSS Level 1 compliant). ORIVEN never stores card numbers
• Data at rest is encrypted by our infrastructure provider

Access Controls

• User accounts are protected by email/password authentication via Supabase Auth
• Sessions use secure, short-lived JWT tokens with automatic expiry
• Administrative access to infrastructure is restricted to authorized personnel only
• Principle of least privilege applied to all internal system permissions

Responsible Disclosure

If you discover a security vulnerability in ORIVEN, we ask that you report it to us responsibly before any public disclosure. We are committed to working with you to understand and resolve the issue quickly.

We kindly ask that you:

• Do not publicly disclose the vulnerability until we have addressed it
• Do not access or modify data belonging to other users
• Act in good faith and avoid any actions that could harm ORIVEN or its users