Security & Trust

Security is the product.

Orrery settles value between counterparties who do not trust each other. Our architecture assumes any single component can be compromised.

Architecture

Key management

Threshold signatures (MPC) — no single party or machine holds a usable key. Shares sit in HSMs; signing requires a quorum that satisfies the on-chain policy engine first.

Settlement integrity

Atomic DvP: a settlement either completes both legs or neither. There is no window in which one counterparty has delivered and the other has not.

Isolation

Customer environments are logically isolated. Policy, limits and allow-lists are enforced server-side and on-chain, not in the client.

Auditability

Every obligation, policy decision and settlement is append-only and independently verifiable by both counterparties.

Compliance posture

SOC 2 Type II: In progress. The report will be available to counterparties under NDA.
Audits: Independent security reviews of the settlement and custody protocols are scheduled before mainnet; results will be published.
Jurisdiction: Orrery Labs AG, Zug, Switzerland. Access is restricted to eligible institutional counterparties; not offered to retail or to persons in restricted jurisdictions.

Responsible disclosure

We welcome reports about the Orrery settlement and custody protocols and smart contracts. Email security@orrerysim.com (PGP in security.txt). Please give us reasonable time to remediate before public disclosure.

Scope. In scope: on-chain protocol and smart-contract assets on Orrery Devnet. Out of scope: this marketing website, self-hosted ancillary services (blog, status, investor/partner portals) and third-party SaaS. A formal bug-bounty programme will launch with mainnet.

No token

Orrery is equity-funded and has no token — no sale, no airdrop, no points, no "claim". Anything offering an Orrery token is fraudulent. Report impersonation to security@orrerysim.com.