Orca
Your numbers stay in your warehouse
What IT and security teams ask us before Orca goes live: where the data goes, who can see it, what the AI sees, and how to switch it off.
Where your data goes
Your NetSuite
Connector reads only
A scheduled script inside your NetSuite reads what changed since the last run, using a read-only role you control.
Orca sync service
Passes it through
Each batch is checked against a key issued for your company only, then written to your database. Nothing is kept here.
Your database
You own it
A database in your own cloud account, in the region you choose. Orca reads your reports from here.
Refreshed on a schedule you set, as often as every 15 minutes. Orca and the sync service only accept encrypted (HTTPS) connections.
Who sees what
- Every person has a role: Finance, budget owner, manager, auditor or viewer.
- Roles are limited by subsidiary and account. Accounts you hide, such as compensation, are filtered out in the database before anything reaches the browser.
- Auditors get read-only access to the general ledger and can download it, without a NetSuite licence.
- Report users sign in to Orca, not NetSuite, so they use no NetSuite licences.
Signing in
- Sign in with Microsoft: your multi-factor policy applies, and turning off someone's Microsoft account stops them signing in to Orca.
- Or personal accounts: one account per person, invited by email with a temporary password changed at first sign-in.
- Passwords are stored one-way hashed. Nobody can read them, including us.
- Five failed attempts lock the account for 15 minutes. Sessions end after 30 minutes idle and 12 hours in total.
A record of every change
- Sign-ins, invitations, user changes and role or access changes go to an access log. The database refuses any edit or deletion of it.
- Each budget step (submitted, sent back, approved, locked, published) and each published version of a report is kept with who did it and when.
What the AI sees
- AI commentary is optional. It drafts month-end commentary from figures summarised by month and line, the names of the main vendors, departments or matters behind a movement, and budget owners' notes.
- It works from those summaries, not from individual transactions. It never changes a number and never posts to NetSuite.
- A person in Finance approves every draft before anyone else sees it.
- It runs on Anthropic's Claude in the United States, and can run under your own Anthropic account. Anthropic's commercial terms don't allow your data to be used to train its models.
Writing to NetSuite
- The connector never writes to NetSuite.
- The only thing Orca can send back is an approved budget, published by Finance, and only if you ask us to switch that on.
Switching it off
- Remove a person in Orca, or in Microsoft, and their access ends.
- Disable the connector's role in NetSuite and the sync stops. We can also revoke your company's sync key at any time.
- If you leave, your database stays yours, with all its history. We remove our access to it.
Service providers
| Provider | Used for | Where |
|---|---|---|
| Your cloud provider | Your database (you choose and own it) | Your choice |
| Vercel | Orca app and sync service | United States |
| Anthropic | AI commentary (optional) | United States |
| Your email provider | Invitations and notices | Your choice |
| Microsoft Entra ID | Microsoft sign-in (optional) | Your tenant |
Questions from your IT or security team? Email hello@voconsulting.ca and we'll set up a call.