Security & Privacy
What we do to protect your data today — and what we do not claim.
Our approach
Each product collects only the data it needs to work. Access to customer data is limited to what is needed to run and support the service.
Encryption
Traffic to our products is encrypted in transit with TLS, and our infrastructure providers encrypt stored data at rest. Ilorb Vault goes further: data is encrypted on your device (Argon2id and XChaCha20-Poly1305) before it reaches us, so we cannot read it.
Access control
Ilorb Omni offers two-factor authentication, roles and permissions, and an audit log of sensitive actions.
Infrastructure
Our products run on Cloudflare's network and on managed Postgres databases from Neon. Ilorb Signal also uses media servers we operate ourselves.
LGPD and GDPR
We process personal data under Brazil's General Data Protection Law (LGPD, Law 13.709/2018). For customers and people in the European Economic Area we follow the GDPR's principles of purpose limitation, data minimization and data-subject rights. You can ask to access, correct, export or delete your personal data; Ilorb Omni has built-in data export and deletion for its customers. A data processing agreement is available for business customers on request.
What we do not claim
We do not hold ISO 27001, SOC 2 or similar certifications today. If that changes, we will say so here and show the certificate.
Report a vulnerability
If you believe you have found a security issue in an Ilorb product, please tell us privately before sharing it publicly. We will acknowledge your report and keep you informed.
- Privacy requests
- contact@ilorb.com
- Responsible company
- CONNECTING THE WORLD SOFTWARE DO BRASIL — CNPJ 52.840.959/0001-39
Av. Paulista, 2444, conj. 102, 10º andar, Bela Vista, São Paulo/SP, CEP 01.310-933, Brasil - Security reports
- contact@ilorb.com