Orbinly is built to support organizations with data-protection obligations. We don't claim certifications we don't hold, so here is what's actually in place:

• Strong separation of every tenant's data (see How client data is isolated).
• Encryption in transit and at rest.
• Tools to export your data (see Exporting your data) and delete it (delete clients, or ask us to close your account).
• A Data Processing Agreement that you accept when you sign up, including standard contractual clauses.
• A public list of the sub-processors that handle data on our behalf.
• Plain-language Privacy Policy and Cookie Notice.

If a client or contact asks you to access or delete their personal data, you can do it from the CRM, and our team can help with anything you can't. Questions: privacy@orbinly.com.