Security information
Practical control, without the theatre.
Orgma Local security overview
Orgma Local is designed to keep workforce records and evidence on the customer-controlled Windows computer. Website payments, licence activation and service emails use separate hosted services and do not receive the Local workforce database.
Customer-controlled data
Customers decide who can use Orgma Local, where it is installed and where protected backups are stored. Use individual Windows accounts, device encryption, current security updates and tested backups.
Human verification
Document reading assists data entry. Imported details do not become trusted qualification records until an authorised user checks the original evidence.
Licence activation
Activation sends only the licence, installation and organisation details needed to check the subscription. It does not upload employee records, qualification records or certificate evidence.
Responsible reporting
If you believe you have found a security problem, email support@getorgma.com with a clear description and safe reproduction steps. Do not access other people's information, disrupt the service or include live credentials.