Security & Compliance

Enterprise-grade trust, by default

Billing is the most sensitive system you run. Orvlin is built to the standard your finance and security teams demand.

SOC 2 Type II

Independently audited controls for security, availability, and confidentiality.

Encryption everywhere

TLS 1.2+ in transit, AES-256 at rest. Keys managed via a dedicated KMS.

RBAC & SSO

Role-based access for finance and engineering, with SAML SSO on Enterprise.

ASC 606 ready

Revenue recognition schedules generated from the same data that bills.

Audit trails

Append-only, immutable ledger of every grant, deduction, and event.

High availability

99.99% uptime SLA with multi-region failover and zero-downtime deploys.

Compliance you can show your customers

We maintain the certifications your enterprise buyers ask about during procurement. Request our SOC 2 report and security whitepaper during your evaluation.

SOC 2 Type IIISO 27001GDPRCCPAPCI-DSS (via PSP)
Request the SOC 2 report
Trust center
Uptime SLA
99.99%
Data residency
EU + US
Encryption
AES-256
Audit log
Immutable

Security questions?

Our team is happy to walk through your procurement requirements.