Built for the part of pharma that gets audited.

Every interaction Orange records is a regulated one. This page sets out how the platform is secured, what has been independently audited, and who processes data on our behalf.

Independent audits and certifications

SOC 2 Type II: Audited. The report, including scope, observation period and auditor, is available under NDA.
ISO/IEC 27001: Certified. The certificate, including its scope statement, is available on request.

Audit reports are shared under NDA. Ask your account contact, or call +91 73870 99465.

Data protection

In transit: All traffic between field devices, the web application and our services is encrypted.
At rest: Customer data is encrypted at rest, including offline capture held on a representative's device before it syncs.
Offline-first by design: The field app captures without a connection and syncs on reconnect. Data queued on the device is encrypted and scoped to that representative's territory.

Regulatory scope

Orange supports GDPR, HIPAA-equivalent and country-specific health data regulations across the markets our customers operate in — India, the Gulf and the wider EMEA region.

A data processing agreement is available for customers who need one.

Controls in the product

Compliance here is not only an infrastructure property. Several controls a regulated commercial team is asked about are features of the platform itself:

Signed audit trail

Every regulated table carries an append-only record of who changed what, and when.

READ →

Adverse event detection

Daily call reports are scanned as they arrive for suspected adverse events and routed for pharmacovigilance review.

READ →

Consent register

HCP consent state is held as a first-class record rather than a note in a free-text field.

READ →

MLR review workflow

Medical, legal and regulatory sign-off on promotional material is a structured, versioned process.

READ →

Sub-processors

Sub-processor	Purpose	Location
Vercel	Website hosting and CDN	Global edge network
Formspree	Demo request form delivery	United States

This list covers processors used to deliver this website and the demo request flow. The full customer-data sub-processor list forms part of the data processing agreement.

Reporting a vulnerability

If you believe you have found a security issue, tell us before you tell anyone else and we will work the fix with you. Reach us on +91 73870 99465 and ask for the security contact.

Please do not run automated scans against production, and do not access data that is not yours.

See Orange in your territory.

30-minute demo. We'll mock your real workflow live.

Request a demo →