Security · Oderra

Access

Only the tools you choose to connect: your ad server, your rate card or catalogue, your planning tools, your own agents. The person who connects a tool signs in to it or gives a key; the person who manages the organisation decides which tools it uses and who holds which role.

Permissions

Fanera reads inventory, avails and delivery. It writes to your ad server only to book what has been confirmed, by a person or by the rules you set. Skopa reads your planning tools and writes nothing to them unless you ask it to.

A person confirms

What commits money or inventory waits for the confirmation your rules require. Every confirmation is recorded with who made it and when.

Who can reach your agent

Buying agents reach Fanera over AdCP with credentials issued per partner. Fanera only sells inventory listed in your adagents.json, and only to buyers your rules allow. Skopa checks a seller's adagents.json before relying on its offer.

Encryption

Data is encrypted in transit and at rest. Keys and tokens are readable only by our servers, never your browser. Access inside Oderra is limited to the people who need it.

Retention

Deals and the record: while your organisation exists, and as long as the other side of a deal relies on it. Data from a disconnected tool: deleted within 30 days. A closed organisation: deleted within 30 days, except billing records the law requires. Technical logs: 90 days.

Language-model processing

[To confirm: language-model provider, for example Claude by Anthropic through its API]. Content sent to the model is not used to train it.

Subprocessors

Cloudflare: this website and the requests sent from it. [To confirm: hosting provider and region of the app and the agents]. The language-model provider above. Stripe: payments.

Data processing agreement

Available on request at privacy@getoderra.com.

Report a vulnerability

Write to privacy@getoderra.com with the details. We answer within two business days and do not take action against good-faith research.