Security and privacy

Your information and your clients' — protected.

End-to-end encryption, automatic daily backups, GDPR and Panama Law 81 compliance. We built Orkasa with the LATAM real estate compliance requirements in mind.

How we protect your data

Three security pillars

AES-256 encryption

All data at rest is encrypted with AES-256. Communications between your browser and our servers always travel over HTTPS/TLS 1.3 with HSTS. We never store passwords in plain text.

Automatic daily backups

Your database is backed up automatically every 24 hours with 30-day retention. Backups are stored encrypted in a region separate from production. You can export your information in CSV or JSON whenever you want.

GDPR + Panama Law 81 compliance

We operate under the privacy principles of Panama's Law 81 and European GDPR. Each brokerage has data isolation (Row-Level Security), per-agent audit logs, and full control over what information is shared with third parties.

Certifications and standards

Compliance status

Forced HTTPSActive
2FA authenticationAvailable
Per-agent audit logActive
RLS per brokerageActive
SOC 2 Type IIIn progress
ISO 27001Roadmap 2026
Frequently asked questions

Security — what we get asked the most

Are my property and client data visible to other brokers on Orkasa?

No. Each brokerage operates in a completely isolated space (Row-Level Security at the database level). No agent or external broker can see your inventory, leads, or contacts. Not even Orkasa support accesses without your explicit authorization.

What happens to my data if I cancel?

You have 30 days to export all your information in CSV, Excel, or JSON. After that, the data is permanently deleted from our servers and backups. We don't sell it or use it to train external AI models.

How do you protect my clients' passwords?

Passwords are hashed with bcrypt (cost factor ≥ 12) before being stored. We never keep them in plain text and we can't recover them. For compromised accounts, the system forces a reset with identity validation.

Where are the servers physically located?

Our data lives on Supabase (PostgreSQL) and Vercel infrastructure, in AWS us-east-1 and sa-east-1 (São Paulo) regions. All providers have SOC 2 and ISO 27001 certification. We can discuss specific data residency for enterprise customers.

Questions

Start today. You'll be operating in 15 minutes.

No. Orkasa reemplaza las herramientas sueltas (Excel, WhatsApp suelto, Canva, 12 pestañas de portales), no tu manera de vender. El kanban de leads, la asignación de propiedades y la firma de mandatos siguen siendo tuyos.

Start today. You'll be operating in 15 minutes.

14 días gratis · Sin tarjeta · Cancelás cuando quieras

Security & Privacy — How We Protect Your Data | Orkasa · Orkasa