Security

Your customers trust you with their details, and you trust us with them. Here is how OrbitPass keeps that data safe.

Every business is walled off

Each business's data is isolated at the database level, so one business can never see another's customers. Every change is also checked on our servers against your role in that business.

The right access for the right people

• Owners, managers and staff have different permissions. Staff see a masked phone number, not the full one.
• Important actions are recorded in an audit log.
• OrbitPass administrators must use two-step verification.

Data in transit and payments

• All traffic to OrbitPass is encrypted.
• We never store card numbers or e-wallet credentials. Payments are handled by our payment provider.

Every image is checked

Images a business uploads are screened automatically for harmful content, and images that clearly break our rules never reach a card. Our team also reviews images, either before they go live (they are stored privately until approved) or by checking every business's live card.

Messages that can't be abused

Messages to customers are plain text with links removed, filtered for blocked words, and capped per customer, so a lock screen is never flooded.

Found a security issue?

Please email support@orbitpassph.com. We'll look into it right away.