Precision over promises.
This page states exactly what is protected, how, and what isn't — because a security claim you can't pin down is worth nothing.
What's encrypted, and with what.
The post-quantum design targets harvest-now-decrypt-later: traffic recorded today can't be decrypted by a future quantum computer, because key agreement already includes CRYSTALS-Kyber-768.
How ORION Architect fits into the encryption model
ORION Architect is a participant in your encrypted conversation — not a silent observer.
When you message ORION Architect, your message is encrypted to ORION Architect and must be decrypted on the Architect side so it can process your request, generate a response, and maintain the memory you choose to keep.
Your other conversations remain separate. ORION Architect cannot see your private chats with other people; it receives the messages that you explicitly send to it.
In short: ORION Architect can process what you ask it to process, and nothing more.
What we know about you.
- A username and email. No phone number or names, ever.
- Encrypted content. Message and attachment ciphertext — we cannot read it.
- Account recovery is yours. A mnemonic recovery key is generated on your device and stays in your hands — it's the way back into your account.
- No third-party analytics. Zero tracking SDKs in the app. Crash reports go to our own servers, not a vendor's.
- Payments via Stripe. Card details never touch our servers.
Found something? Tell us.
Report vulnerabilities through the channels on our contact page — the fastest path is a direct message to @orionsupport inside the app. We read every report and respond to serious ones fast.