Security and access
What Bhor OE does to keep each customer's data and access separate, controlled and recorded. Plain statements about what the product does.
Patent pending
Security
Designed from the Top. Proven from the Bottom. The same idea applies to access and data: nothing is assumed, and everything is recorded.
A new person is queued as an access request. A human approves or denies it, with a reason.
Sign in through your identity provider over OIDC or SAML, with SCIM provisioning.
Publishing a policy, accepting a risk and approving an exception each require a fresh identity check, even inside a signed-in session.
When someone leaves, their access and every open session end immediately.
Every customer’s data is separated at the database level. An automated check fails the build if any table is missing that protection.
The platform detects conflicting permissions, and records them with every other security event.
The platform refuses to start with a known default key or password.
Customers claim their own workspace and create their own administrator. We cannot plant an admin inside a customer’s organization.
Questions from your security team? Contact us or write to contact@bhortech.com.
Frameworks
Bhor OE supports the frameworks your program is measured against.
Bhor OE helps you build and run a SOC 2 program: it maps your requirements to the Trust Services Criteria, drafts the policies, and collects the evidence an auditor asks for.
Bhor OE helps covered entities and business associates manage HIPAA Security Rule and Privacy Rule requirements, from policy to evidence.
Also supported: ISO 27001, NIST and GDPR.
Bhor Tech's own SOC 2 readiness is in preparation.
Framework mappings are provided to support your program. Using Bhor OE does not by itself make an organization compliant with any standard.
See it in action
In a guided demo, a presenter signs in once and can view the product as any role in two organizations.
A fictional organization.
A fictional organization.
Select a role to see what that person works with.
Sees the health of the organization, not just its audit status: policy coverage, procedure maturity, control effectiveness and audit readiness on one set of dashboards.
The demo follows a single chain end to end, so you can see how each step leads to the next.
Employees ask in plain language and get an answer from approved policies and procedures.
Asked by an employee in Operations. The answer draws only on what that person is allowed to see.
Open a vendor request, attach the vendor's security questionnaire, and send it to the risk manager. The vendor cannot be used until the request is approved.
Source: Vendor Onboarding Procedure, step 2Every organization, person and record in the demo is fictional. The full walkthrough is shown live, in a guided session.
How we start with you
We talk about your industry, your size and how you deploy.
We show you the day-one program it would start with. You can correct it before anything is created.
You open your private link and claim the workspace with your own identity, so you are the administrator. The link works once and expires.
You adopt the frameworks you need and start from the policy and control library.
Plain about limits
We describe what the product does, and say where it stops.
Using Bhor OE does not by itself make an organization compliant with any standard.
Framework mappings are provided to support your program. Whether you meet a standard is for you and your auditor to decide.
The organizations and data in our demo are fictional.
You won’t find invented testimonials or numbers on this site.
Why it is built this way
I built Bhor Tech to fix both at the source: procedures that make compliance follow, and a local LLM designed to answer from your own knowledge, inside your environment and within each person’s access.
Rabi Kulshi, Founder · Read the full story
Tell us about your organization and we will walk you through the platform.
