Security Statement

Orbweaver provides the highest level of data security for government and corporations in the transfer and maintenance of sensitive information. We never mine or share data and customers always retain ownership and control. All customer data belongs directly to our customers, and is only used when explicitly approved.

Securing and maintaining the privacy of our customers’ data is one of Orbweaver’s top priorities. Our customers’ data is always secured: never mined, never shared, and never used in aggregate or anonymously. We respect our customers’ data and know it belongs solely to them. 

To fulfill our obligation, Orbweaver’s data security system has three key features:

1. SOC 1 and SOC 2 Compliance:

Orbweaver adheres to both SOC 1 and SOC 2 compliance standards, ensuring the highest levels of security, availability, processing integrity, confidentiality, and privacy. Our systems and processes meet rigorous requirements for securely managing customer data. This includes but is not limited to:

• Regularly audited by third-party firms to ensure compliance.
• Continuous monitoring and alerting systems to detect and respond to threats.
• Robust incident response plan for managing and mitigating security breaches.
• Comprehensive employee training programs on data security and privacy policies.
• Implementation of stringent access controls and user authentication mechanisms.

2. Proprietary Encryption Technology:

• Data is secured using a proprietary 512-bit encryption sequence and then further base64 encoded upon persistence.
• This data can only be accessed by the supplier and purchaser who want to share that data with one another.
• Secured data will never be used for any analysis purposes or shared in any way.
• The Orbweaver system itself does not have access to secured lockbox data. Only the supplier and purchaser have decryption keys (via a proprietary separation-of-concerns mechanism) to unlock that data—those keys are passed into the Orbweaver system at the time a pricing request is made by the purchaser.
• Beyond the proprietary encryption technologies, all Orbweaver data lives in a hardened, n-Tiered application cluster behind a restrictive firewall and intrusion alert system. All data integration points are protected by standard HTTP SSL encryption (where appropriate), and we follow all industry-standard application security best practices.

3. Proprietary Terms of Service Tagging:

All data (including pricing, availability, and manufacturer data) is tagged with Terms of Service when it enters the Orbweaver system, and all users accessing the data are likewise granted a role based on their job function. All data access is then restricted by the Role of the User in order to strictly conform to the Terms of Service as provided by each individual data provider.