How we keep your data safe.
Where your data lives, how it is protected and who can see it.
Last updated 29 September 2026.
Where your data lives
Your database is in Frankfurt, in the EU. Copies of the emails we send are kept by Resend in the US, under the safeguards on the Subprocessors page.
How it is protected
Your data is encrypted in transit, on its way between your browser and Orlo, and at rest, where it is stored.
When Orlo opens, the passwords and keys of your test accounts are also encrypted separately. They are never shown again after you save them, and never sent to the AI model.
Only your test environment
When Orlo opens, it only visits the staging address you give it, and it blocks your live address.
Who at Orlo can see what
When Orlo opens, we can see your account, billing and usage details. We never see your tickets, reports or screenshots, unless you invite us into your workspace.
Your data and AI
Your data is never used to train AI models.
Companies that help run Orlo
A few service providers help us run Orlo. See the list of subprocessors for who they are, what they do and where they process data.
Reporting a security issue
Found a problem? Tell us through the contact page, with the topic “Security”. A person reads it.