Security and privacy
Your work is private by default. Here is how Vorlio protects sign-in, limits what each person can see, and keeps your files, calls and recordings on your own server.
See live system statusSigning in
- Two-factor authentication
- Codes from an authenticator app on every sign-in, when turned on.
- Sessions you control
- See every device that is signed in and sign them out. Changing a password signs out the others.
- Invite-only workspaces
- People join a workspace only through an invite; someone who signs up gets a workspace of their own.
Who sees what
- Roles
- Owner, admin, member, limited member and guest, each with clear limits.
- Private Spaces, tasks and docs
- Visible only to the people you pick — hidden from lists, search and links for everyone else.
- Guests see only what is shared
- Guests (such as clients) reach only the Spaces they were added to, never internal comments or time records.
- Files
- Downloads are checked against the same permissions as the task or doc they belong to.
- API keys
- Stored only as a hash, read-only or read/write, with expiry; they act with their owner’s role and can’t change passwords, sign-in, keys or webhooks.
- Signed webhooks
- Each delivery is signed (HMAC-SHA256) so your app can check it came from Vorlio; webhooks can’t call addresses inside your server’s network.
- Secret feed links
- Calendar and spreadsheet links show only what their owner can see and can be turned off any time.
Your server, your data
- Calls on your server
- Audio and video go through Vorlio’s own media server — not Google, Zoom or another provider.
- Transcripts and notes on your server
- Speech-to-text and meeting notes run on your machine. Voice files are deleted after transcription.
- Your own AI
- Vorlio AI (chat, Ask Vorlio, the daily brief, images) runs on your server; nothing is sent to an outside AI service, and Ask only searches what the person asking may open.
- Export any time
- Download your workspace data as a file from Settings.
Keeping it running
- Health checks every 5 minutes
- Database, storage, real-time, email, calls, Vorlio AI and webhook deliveries are checked and published on the status page.
- Backups
- Nightly database and file backups, with a copy off the server when configured.
- Audit log and trash
- Admin changes are logged; deleted items can be restored for 30 days.
Put your team’s work in one place.
Set up your company, invite the team and start your first project in a few minutes.