---
title: "Security and Compliance at Ormi"
description: "Learn how Ormi protects sensitive data with enterprise-grade security and compliance protocols for partners, customers, and employees."
url: https://ormilabs.com/security
---

Security & compliance

# Enterprise-grade security  
and compliance.

Delivering the highest standards of security, availability, and operational integrity for the most stringent enterprise use cases.

[Talk to our security team](https://ormilabs.com/contact-us) [Get started](https://app.ormilabs.com)

![Trusted by leading Web3 teams](https://ormilabs.com/assets/security/trusted-logos.png)

Secure by design

## Layered controls across every part of the platform

### Encryption

AES-256 at rest, TLS 1.2+ in transit. Credentials are stored in dedicated secrets management, separate from application code.

### Access controls

SSO with MFA for all employees. Role-based access is scoped to what each role needs, with phishing-resistant MFA for sensitive systems.

### Security testing

Continuous internal assessments and annual third-party penetration tests across all systems and applications.

### DDoS protection

Industry-standard mitigation absorbs large-scale attacks without affecting service reliability.

### Incident response

Documented response plans with severity levels and escalation paths. Affected customers are notified promptly.

### Audit logging

System and access activity is logged and retained for auditing, investigation, and compliance reporting.

### Business continuity

Tested disaster recovery and continuity plans. Distributed architecture keeps regional issues from becoming yours.

### Security training

All employees complete security awareness training, with ongoing education on phishing, social engineering, and data handling.

**99.9%+**Uptime SLA across all production services

**<10 seconds**Average failover recovery time

**24/7**Infrastructure monitoring with automated alerts

Infrastructure

## Global, with redundancy at every layer

01

### Tier III data centers

Our own bare-metal servers in certified facilities globally, with isolated network segments and controlled physical access.

02

### Automatic failover

If a node goes down, traffic reroutes automatically. No manual intervention, no downtime for your services.

03

### 24/7 monitoring

Every layer of the stack is observed continuously, with automated alerts and clear escalation paths.

Compliance

## Third-party audits

Independent verification of how we handle security, availability, and privacy.

In progress

In progress

### SOC 2 Type II

Security, Availability & Confidentiality

In progress

### ISO 27001

Information Security Management System

Planned

Planned

### SOC 1 Type II

Internal Controls over Financial Reporting

Planned

### ISO 27701

Privacy Information Management

## Found a security issue?

If you find a vulnerability in any Ormi product, please reach out and our team will respond promptly and work with you to resolve it.

[Report a vulnerability](https://ormilabs.com/contact-us) [Documentation](https://docs.ormilabs.com)

Learn more

## Explore Ormi

[

### Technology

Learn about how Ormi’s infrastructure works under the hood.

](https://ormilabs.com/why-ormi)[

### About Ormi

The team behind the fastest blockchain data layer for Web3.

](https://ormilabs.com/about-ormi)[

### Customer stories

What teams building with Ormi have to say about performance

](https://blog.ormilabs.com/tag/case-study/)