Orqentis Security

Orqentis is designed for Microsoft Fabric tenant isolation, delegated OneLake access, and auditable enforcement runs.

Security model

• Microsoft Entra ID protects API access.
• OneLake reads use the signed-in user's On-Behalf-Of token.
• All API calls propagate X-Correlation-Id.
• Secrets are stored in Azure Key Vault or GitHub/Azure deployment secrets, not source code.

Report a security issue

Report suspected vulnerabilities through the configured customer security contact. Do not include secrets, bearer tokens, or customer table data in public issue trackers.