Orren LLC provides a connected sales workspace. This page summarises our safeguards and how to report a concern. Detailed operational configurations are not published here.
Protecting your workspace
- Encrypted connections and storage. Connections to Orren’s services use transport encryption, and our cloud provider encrypts stored data.
- Account and workspace access. Authentication and permission checks restrict access to authorised users. Team roles and sharing controls determine access within a workspace.
- Connected accounts. Access credentials are used to maintain the connections you authorise. Disconnect services you no longer use and secure the underlying platform accounts.
- App credentials and updates. The apps use secure device credential storage. The Mac app is developer-signed and notarised by Apple; its update mechanism verifies signed updates. iPhone releases are delivered through Apple’s distribution services.
- Operational access. Administrative access is restricted to people who need it to operate, support and protect the service.
No system can guarantee complete security or availability. Keep your devices updated, protect sign-in methods and review who has access to your team. Local caching does not make Orren an offline-only service; messaging, sync and hosted features depend on network access.
Reporting a vulnerability
If you believe you have found a security problem in Orren, please tell us before telling anyone else.
- Email security@tryorren.com with "security" in the subject. We acknowledge within two business days and keep you informed.
- Please give us enough to reproduce it, and please do not access, change or delete data that is not yours, do not disrupt the service, and do not test against other customers' accounts. Test with your own.
- We will not take legal action against research that follows these rules and is made in good faith.
- We fix confirmed issues as quickly as their severity warrants and credit you if you wish once the fix has shipped.
A machine-readable version of this notice is at /.well-known/security.txt.
Incidents
If we learn of a breach affecting your data we tell you without undue delay and within 72 hours of becoming aware, with what we know, what it affects, and what we are doing about it.
