Security & Privacy at Orizon Analytics
Written By Oscar
Last updated 3 days ago
Protecting your financial data isn't a feature; it's the foundation of how we build and operate the platform.
Governance
Security and compliance are managed directly by Orizon's executive and senior engineering leadership, not outsourced. This means the people making product decisions are the same people accountable for your data's safety.
Industry Standards
We align our security program with the Cloud Security Alliance (CSA) STAR framework and complete the annual Consensus Assessments Initiative Questionnaire (CAIQ): a detailed self-assessment that documents our security controls across all cloud infrastructure. This documentation is available to compliance auditors and integration partners on request.
Internal Controls
Access to customer financial data is denied by default. Employees and internal systems are only granted the minimum permissions required for their role, and all access rights are formally reviewed every quarter to ensure nothing is broader than it needs to be.
We also treat people as part of our security posture. All staff and contractors complete security awareness training at onboarding and annually thereafter, with a focus on phishing, social engineering, and credential safety; because most breaches start with human error, not technical failure.
Legal & Privacy Documentation
For a complete picture of how we collect, use, and protect your data, we encourage you to review our Privacy Policy and Terms of Service. These documents outline your rights, our obligations, and the specific commitments we make regarding your personal and financial information.
If you have any questions or encounter any issues, please contact our support team for assistance at support@orizonanalytics.io.