# Security and isolation

Security and access boundaries

Status: Reference

Documentation updated: 2026-09-26

Source: https://docs.orneos.com/docs/security

Orneos is pre-release. This page describes current boundaries, not a security certification or an uptime guarantee.

## Access to work

Sign-in and authorized company/team access determine which work you may use. Membership and Vault access have distinct rules; see [Members and roles](https://docs.orneos.com/docs/members-and-roles) and [Vault spaces](https://docs.orneos.com/docs/vault-spaces). Company-admin status alone does not grant team roster administration.

## Data on your device

The app stores part of your working data locally. Removing access can prevent future authorized requests, but cannot guarantee erasure of data previously received, copied or exported. Use a trusted device and review [Local data and storage](https://docs.orneos.com/docs/local-data) before clearing data or sharing a browser profile.

## Credentials and assurance

Protect your account and any provider keys. Read [AI keys](https://docs.orneos.com/docs/ai-keys) for the browser-held drafting-key boundary and [Privacy and your data](https://docs.orneos.com/docs/privacy-and-data) for handling details. Do not assume SOC 2 certification, enterprise SSO, a published SLA or production-scale assurance from this documentation.

Discuss your security requirements with us before sharing sensitive material. The detailed edition supports a closer technical evaluation.

## Detailed documentation

For a closer evaluation of workflows and technical boundaries, [request access](mailto:support@orneos.com?subject=Request%20detailed%20Orneos%20documentation). Access does not change feature availability.