FAQ

Straight answers

The questions we hear most, answered plainly. If yours is not here, ask us.

What is Bhor OE?

Bhor OE is the platform for Organization Engineering. Operational Excellence designs how the organization should run from the top down, Governance proves that it does from the bottom up, and Enterprise Knowledge Management puts answers from your own approved policies and procedures in every employee's hands.

Do we have to start with an audit or a framework?

No. You can start with Operational Excellence on its own, with Governance at the procedures you already have, or with both joined at controls. Audit or risk demands can come later, or never.

Which frameworks does Bhor OE support?

Bhor OE helps you build and run a SOC 2 program: it maps your requirements to the Trust Services Criteria, drafts the policies, and collects the evidence an auditor asks for. It helps covered entities and business associates manage HIPAA Security Rule and Privacy Rule requirements, from policy to evidence. ISO 27001, NIST and GDPR are also supported.

Does using Bhor OE make us compliant?

Framework mappings are provided to support your program. Using Bhor OE does not by itself make an organization compliant with any standard.

What is Bhor Tech's own security status?

Bhor Tech's own SOC 2 readiness is in preparation. The security measures built into the product are listed on the Trust and Security page.

Where does our data go when employees ask questions?

The knowledge assistant is designed to run on a private, local large language model inside your environment. With the local model, policies, procedures and the questions people ask are processed inside your environment, not sent to an outside AI service. You can optionally connect a vendor-hosted model instead, where your policies allow it.

Who can see what?

Each answer draws only on what the person asking is allowed to see, by department and role. Access to policies, procedures and answers is scoped the same way.

How do people sign in, and what happens when they leave?

People sign in through your identity provider over OIDC or SAML, with SCIM provisioning. When someone leaves, their access and every open session end immediately.

How does getting started work?

First, a short conversation about your industry, size and how you deploy. Second, we prepare your workspace and show you the day-one program it would start with, which you can correct before anything is created. Third, you open your private link and claim the workspace with your own identity, so you are the administrator. The link works once and expires. Fourth, you adopt the frameworks you need and start from the policy and control library.

Can we see a demo?

Yes. The guided demo uses two fictional organizations, Meridian Health System and Atlas Financial Group, and a presenter can show the product as any of six roles. The full walkthrough is shown live. The Trust and Security page has a small peek.

Still have a question?

Write to us and we will answer it directly.