Security Policy
ORVISTA applies safeguards to protect Executive Access requests, correspondence, supporting materials, and written outputs, with controls calibrated to the nature and sensitivity of the information throughout the relevant review and engagement stages.
Core principles
Restricted Access
Client materials are handled through systems and channels subject to defined access controls.
Limited Circulation
Materials and outputs are shared only within the engagement scope and with approved recipients.
Structured Handling
Accounts, devices, and documents are managed under defined safeguards for protection and access control.
Human Oversight
Any digital or AI-assisted support remains subject to direct professional review.
Access and confidentiality
Request information, official ORVISTA email correspondence, supporting materials, and written outputs are handled through defined working channels and systems. ORVISTA does not provide a client portal for direct access to working materials. Materials and written outputs are shared through approved official channels within the agreed engagement scope.
Written outputs are delivered to the designated leadership contact, or to other recipients approved by the client within the engagement scope, through the agreed official channels.
Secure handling
ORVISTA uses managed business systems and defined document and communication procedures appropriate to the nature of its written analytical work.
Depending on the system, material, and circumstances, safeguards may include controlled account and device access; authentication and password protections; restricted document storage; limited creation and circulation of working copies; separation of client materials from unrelated work; appropriate software and system updates; reasonable backup and recovery measures; and delivery through defined channels to approved recipients.
No electronic system or method of transmission can be guaranteed to be completely secure. Safeguards are therefore applied according to the nature and sensitivity of the information involved.
AI-assisted security controls
Where AI-assisted tools are used, they support defined internal analytical purposes and remain subject to direct human review.
ORVISTA limits unnecessary identifying information and maintains responsibility for the final analytical and written output. Client-submitted materials are not used by ORVISTA for the purpose of training AI models.
Security incidents
If ORVISTA becomes aware of unauthorized access, loss, misuse, or disclosure affecting submitted materials, it will assess the circumstances and take reasonable steps appropriate to the nature and impact of the incident.
Notifications will be made where required by applicable law or an applicable contractual obligation.
Security inquiries
Security-related questions or suspected security issues may be reported to contact@orvista.co