1) Keyless Architecture & The Encryption Shield
Most applications store "Master Keys" in files that can be stolen. Orbiq keeps them in Google Cloud Secret Manager and Cloud KMS, a "Keyless" architecture: system keys are retrieved into volatile memory (RAM) at startup and are never persisted on the application server.
- Encryption Shield: Your data lives in Cloud SQL for PostgreSQL in a Canadian region, protected by AES-256 encryption at rest and row-level security. Because keys are held off-server, stolen database files remain unreadable "digital noise".
2) Local-First Sanitization (PIPEDA Principle 4)
Orbiq follows a strict data minimization protocol. Before any transaction string leaves Canadian soil for AI categorization, it passes through our mandatory Local Sanitization Layer.
- PII Stripping: Direct identifiers, such as names and account numbers, are scrubbed locally in Toronto.
- Financial Generalization: Transaction amounts are rounded or generalized to provide context for AI without revealing precise financial balances.
- Merchant De-identification: Only sanitized keywords (e.g., "WAL-MART") are sent to AI endpoints for categorization.
- Ask Orbiq: When you ask the assistant a question, it receives your question as you typed it plus totals computed on your data — never a transaction row. Email addresses, phone numbers and long account numbers in your question are removed first; names and places you type are kept, because they are how the assistant finds your own categories and merchants. Amounts in those totals stay exact, so the answer can state your own figures. If you ask about a household shared with you, the assistant also sees that household owner's display name, so it can tell which one you mean.
3) AI Accountability (Groq ZDR)
We utilize Groq Inc. for high-speed categorization and the Ask Orbiq assistant, explicitly configured for Zero Data Retention (ZDR).
- Your data is processed in volatile memory and is never used to train global AI models.
- Under our Data Processing Addendum (DPA), Groq is contractually prohibited from persisting prompt data for any period beyond the live inference session.
4) Immutable Auditing (Axiom)
Accountability is a core pillar of PIPEDA. Orbiq utilizes Axiom to maintain a 100% immutable audit trail of all security events and administrative actions. This ensures that even in the event of a breach, we can accurately reconstruct events to protect our users and fulfill regulatory requirements.
5) Data Sovereignty & The Right to Erasure
Orbiq supports your absolute right to be forgotten.
- Total Wipe: From Settings (Advanced on the web; About & legal → Delete account & data in the apps) you can reset your data or close your account entirely. Each is confirmed with a code emailed to you and can be cancelled during a short cooling-off window: 24 hours for a reset, 5 business days for a closure. See how deletion works.
- 15-Day Purge: Upon account closure, all remaining Personal Identifiable Information (PII) is permanently purged from our active systems within 15 days.
- Residency: Primary user databases are hosted within Canadian data centers to ensure regional sovereignty.
6) Privacy Officer Designation
In accordance with PIPEDA Principle 1, FINARO CAPITAL SERVICES INC., the data controller for Orbiq, has formally appointed a Privacy Officer to oversee our data management and compliance roadmap.
Official Contact: [email protected]