Approvals before anything goes out
Each Tron agent has rules for what it may do on its own, with send windows and calling hours. Anything outside them waits as a draft on one Approvals page. Marketing sends always need a person.
Security & control
What we do to protect your data, specifically
No badges or buzzwords. This page lists what Oroe actually does today to protect your business data and keep you in charge of the AI, and what isn’t in place yet.
Control over AI
You decide what the AI may do
Your key, stored encrypted
Pulse uses the AI provider you connect: OpenAI, Anthropic, Google, an OpenAI-compatible service or your own self-hosted model. Provider keys are encrypted before they are stored.
Conversations not logged by default
Pulse does not keep the text of your AI prompts and replies in its logs unless your workspace switches that on.
Protecting your data
How your data is kept apart
Per-workspace data
Each business or brand is its own workspace. Cue, Nest, Relay and Pulse keep records per workspace, and every request is checked against who you are.
Roles and permissions
You choose which modules each person can open, and roles inside each module decide what they can see and change.
Audit log
See who did what and when, including your own account activity, in the analytics portal.
Invitation-only sign-up
New accounts need an invitation code and a one-time code sent to the email address. Sign-in tokens expire after 8 hours and are renewed only while your session is active.
Safe published sites
Content on Cue sites is cleaned of unsafe code when you save it and again when it is shown, and published sites run under a strict content security policy that blocks inline scripts.
Safe email viewing
Relay shows email bodies in a sandboxed frame, so a malicious message can’t run code in your inbox.
A locked-down admin console
Oroe’s own administration console is not reachable from the public internet and requires two-factor sign-in.
Nightly backups
Databases and uploaded files are backed up every night and kept for 30 days.
You can take your data
Export your contacts from Nest as CSV at any time, or ask us for a copy of your data.
Security questions
Does Oroe train AI models on my data?
No. Oroe doesn’t train models. Your requests go to the AI provider you connect, under your own account and that provider’s terms, or to your own self-hosted model.
Can an agent email my clients without me?
Only inside the rules you set for that agent. Everything else waits as a draft for approval, and marketing campaigns always need a person to approve them.
Do you have security certifications?
Not yet. We would rather describe what we do than show a badge we haven’t earned.
Can I turn on two-factor sign-in for my account?
Not yet for customer accounts. Today two-factor sign-in protects Oroe’s own admin console only.
How do I report a security issue?
Email support@oroe.ai with the details.
AI you can check
Start with every agent set to draft for approval, and give it more freedom as it earns it.
Oroe is in early access: sign-up needs an invitation code. No code yet? Ask us for one.