Security

Private by default.

How Vorlio protects sign-in, limits what each person can see, and keeps your files, calls and recordings on your own server.

Signing in

Two-factor authentication: Codes from an authenticator app on every sign-in, when turned on.
Sessions you control: See every device that is signed in and sign them out. Changing a password signs out the others.
Invite-only organizations: People join an organization only through an invite; someone who signs up gets an organization of their own.

Roles: Owner, admin, member, limited member and guest, each with clear limits.
Private Hubs, tasks and pages: Visible only to the people you pick — hidden from lists, search and links for everyone else.
Guests see only what is shared: Guests (such as clients) reach only the Hubs they were added to, never internal comments or time records.
Files: Downloads are checked against the same permissions as the task or page they belong to.
API keys: Stored only as a hash, read-only or read/write, with expiry; they act with their owner’s role and can’t change passwords, sign-in, keys or webhooks.
Signed webhooks: Each delivery is signed (HMAC-SHA256) so your app can check it came from Vorlio; webhooks can’t call addresses inside your server’s network.
Secret feed links: Calendar and spreadsheet links show only what their owner can see and can be turned off any time.

Calls on your server: Audio and video go through Vorlio’s own media server — not Google, Zoom or another provider.
Transcripts and notes on your server: Speech-to-text and meeting notes run on your machine. Voice files are deleted after transcription.
Your own AI key: Vora uses the AI provider your admin picks (Groq, Gemini, OpenAI, OpenRouter, Cloudflare or your own model server) with your own key; keys are encrypted and never reach browsers or logs, and Ask only searches what the person asking may see.
Export any time: Download your organization data as a file from Settings.

Health checks every 5 minutes: Database, storage, real-time, email, calls, Vora and webhook deliveries are checked and published on the status page.
Backups: Nightly database and file backups, with a copy off the server when configured.
Audit log and trash: Admin changes are logged; deleted items can be restored for 30 days.

Run Vorlio on your own server, or let us host it. Private to your organization either way.