Your data security is our top priority. Learn about how we protect your information and maintain enterprise-grade security standards.
All data is encrypted at rest using AES-256 and in transit using TLS 1.3. Your workshop notes and client information are always protected.
SSO via Google OAuth. OAuth 2.0 with secure token handling. No passwords stored for production users.
Role-based access control (RBAC) at system, organization, and project levels. Principle of least privilege enforced.
Hosted on Google Cloud Platform with private VPC networking, Cloud Armor WAF protection, and automatic scaling.
Comprehensive audit logs of all user actions. Organization admins can view and export their audit trail for compliance.
Configurable data retention policies. Full data export in JSON format. Data deletion upon request within 30 days.
We use the following third-party services to provide Exordia:
| Provider | Purpose | Location |
|---|---|---|
| Google Cloud Platform | Infrastructure, Database, Storage | United States |
| Anthropic | AI Processing (Claude) | United States |
| Google (Gemini) | AI Processing | United States |
| Google OAuth | Authentication | Global |
| SMTP Provider | Transactional Email | United States |
If you have security concerns or want to report a vulnerability, please contact us.