Compliance and Security Overview
This Trust Center provides transparent visibility into Territories.ai, Inc. DBA Orbytal's security, compliance, governance, and trust documentation, giving your procurement and security teams everything they need in one place.
SOC 2 Type 1
Third parties that process data on our behalf under strict contractual safeguards.
Amazon Web Services
Cloud infrastructure and platform services provider used for hosting applications and data, including customer PII.
Bitbucket (Atlassian)
Source code management for the Territories.ai platform. In scope for SOC 2 SDLC controls (branch protection, code review, mandatory PRs, pipeline access).
Productivity and identity management suite (Google Workspace). Used for: (1) team authentication and identity provider with MFA enforcement at the org level, (2) business email, calendar, and document storage. Sub-processor classification: Customer Data may appear in email correspondence with customer contacts (e.g., billing notifications, support exchanges, contract negotiation). On that basis Google Workspace is documented as a sub-processor in the Sub-Processor Disclosure provided to customers.
OpenAI
Production LLM provider via standard OpenAI API account (not Enterprise/Team). Processes customer data in prompts: names of Territories.ai employees and names of customer organization employees and roles. Email addresses, end-consumer PII, payment data, government IDs, and health data are NOT sent. Mitigation stack: (1) signed OpenAI standard Data Processing Addendum (GDPR/CCPA processor terms, breach notification, sub-processor management, data-return-or-delete on instruction), (2) OpenAI's published policy that API and business data are not used to train models by default, (3) operational opt-out: data-sharing toggle is OFF in Territories.ai's OpenAI organization, verified annually, (4) prompt scoping controls.
Sentry
Application error monitoring and alerting for the Territories.ai platform. Receives error events that may contain stack traces and limited request context. SOC 2 monitoring evidence source.