Orqista is designed so your code and data stay under your control. Whether you choose cloud or self-hosted, security is built into every layer.
Data Sovereignty
Your code stays under your control. Self-hosted Orqista means no external data transfer, no cloud dependencies, no data leaving your network.
Self-hosted: zero external data transfer
Cloud: isolated, encrypted tenancy
No model training on your code — ever
Full data retention and deletion controls
Agent Capability Isolation
Every expert agent operates under explicit capability grants — deny by default. Capabilities are declared at agent definition time and enforced at the kernel level.
Per-expert tool allowlists: agents only call what they're authorized for
Shell command allowlists by prefix pattern — not open-ended exec
Symlink-aware path canonicalization on every file and execution tool
Blocked system paths: /etc, ~/.ssh, ~/.aws regardless of workspace boundary
Workspace isolation: each mini-job runs in its own directory