Data & security

OrgVector is built and operated by elrrich, LLC. This page summarizes how we host the Service and handle organizational data at a high level. It does not replace our Privacy Policy or Terms of Service for legal detail.

The OrgVector web application is deployed on Vercel’s global edge and serverless platform. Requests are served over HTTPS (TLS). Static assets and application routes are delivered from Vercel’s infrastructure in line with their security and availability practices.

Application data—including accounts, companies, org charts, positions, health-check results, assessments, programs, and versions—is stored in a PostgreSQL database managed by Supabase. Authentication (sign-in, sessions, and related tokens) is handled through Supabase Auth.

Supabase and Vercel provide encryption in transit and at-rest protections as described in their documentation. Access to production systems is limited to what is needed to operate and support the Service.

Subscription billing and payment methods are processed by Stripe. We do not store full payment card numbers on OrgVector infrastructure; Stripe handles card data according to its security standards.

We use Google Analytics (GA4) to understand traffic and product usage. You can manage cookies and tracking through your browser where applicable.

OrgVector is designed for manual entry and structured workflows inside the product (org editor, health check, scenarios, etc.). We do not automatically sync with your HRIS, payroll, or identity provider today. If we add integrations in the future, we will describe them here and in our Privacy Policy.

Export and reporting features may allow you to download data you control; you remain responsible for how you share those exports outside OrgVector.

Use strong passwords and protect your account. Invite only collaborators who should see your organization’s data. For consultant plans, ensure client agreements allow you to process data in OrgVector as you do today.

OrgVector provides diagnostic and analytical output to support decisions; it does not replace professional legal, HR, or compliance advice.

For security questions or to report a vulnerability, contact elrrich, LLC through https://elrrich.llc or the support channel provided in the application.