SEGURIDAD POR DISEÑO
Diseñado para seguridad.
Identifique datos sensibles y evalúe solicitudes contra sus políticas con modelos de seguridad propios de Aona y controles deterministas.
MODELOS DE SEGURIDAD DE IA PROPIOS DE AONA
Aonamodelos y reglas propios para la seguridad de IA precisa y rentable.
Orbital is Aona’s own security technology: purpose-built models, deterministic detectors and the evaluation work behind them. It powers sensitive-data recognition and policy checks inside Aona, with supported processing on employee machines, on-premises or in the cloud. Orbital 2 runs the whole check, Radar, Lens and Reflex, on a laptop in under a tenth of a second.
SEGURIDAD POR DISEÑO
Identifique datos sensibles y evalúe solicitudes contra sus políticas con modelos de seguridad propios de Aona y controles deterministas.
RENDIMIENTO
Combine precise validation with focused models for efficient security checks. 96.6% correct policy decisions on held-out tests, y a full check in under 0.1 s on a laptop.
CONTROL DE DESPLIEGUE
Ejecute controles Orbital soportados en máquinas de empleados, local o en la nube, alineado con sus requisitos de privacidad y despliegue.
SPEED
Orbital 2 reads the text once and answers every guardrail in the same pass. In the cloud one verdict comes back in 93 ms and a 37-guardrail framework in 0.73 s; on a laptop the full check takes under a tenth of a second, in a few hundred megabytes of memory.
Response time per request
Median, one request at a time. Lower is better.
In the cloudOrbital Cloud 2.2.9 on a T4 GPU, measured 9 October 2026
On a laptopApple M4, Reflex on the Mac GPU
~20 ms
Per guardrail in a full framework
37 guardrails in 0.73 s on Orbital Cloud, every one evaluated, because Reflex reads the text once y answers them all in the same pass.
Medians, one request at a time, with the 95th percentile where it was measured. In the cloud every guardrail of every framework was evaluated. On the laptop, the full check was measured on the installed Orbital 2.2.9 agent and the framework timings on the same Orbital 2 Reflex model.
| Where | Measure | Median | Detail |
|---|---|---|---|
| In the cloudOrbital Cloud 2.2.9 on a T4 GPU, measured 9 October 2026 | One verdictaverage-length prompt, 120 requests | 93 ms | 121 ms at p95 |
| In the cloudOrbital Cloud 2.2.9 on a T4 GPU, measured 9 October 2026 | Framework of 19 guardrailsevery guardrail evaluated, 40 requests | 393 ms | 445 ms at p95 |
| In the cloudOrbital Cloud 2.2.9 on a T4 GPU, measured 9 October 2026 | Framework of 37 guardrailsevery guardrail evaluated, 40 requests | 0.73 s | 777 ms at p95 |
| On a laptopApple M4, Reflex on the Mac GPU | Full check on one promptReflex, Lens y Radar together, 38 requests | <0.1 s | medians of 53 y 76 ms in two runs |
| On a laptopApple M4, Reflex on the Mac GPU | Framework of 8 guardrailsone request reads the text once | 390 ms | |
| On a laptopApple M4, Reflex on the Mac GPU | Framework of 37 guardrailsone request reads the text once | 1.5 s |
ACCURACY AGAINST OTHER GUARD MODELS
Aona scores Orbital y the alternatives on the same held-out prompts, with the same policy text. On both jobs Orbital is built for, deciding policy and finding personal data, it leads the purpose-built guard models and detectors we tested.
Policy guardrails
887 held-out prompts across 52 policies. 430 violations, 457 allowed requests.
Aona Orbital
Purpose-built guard models
Frontier general-purpose models, hosted API
Orbital decides policy like a frontier model, on the employee’s own machine. The hosted frontier models refused 20 to 30 prompts, mostly the encoded and injection attacks a guardrail exists to read, and were scored only on the rest. Orbital answered all 887.
Accuracy is agreement with the reference decision: catch the violation, allow the benign request. A model that answered “allowed” every time would score 51.5%.
Aona ran Granite Guardian and Llama Guard on its own Tesla T4 GPU with each policy injected into the model’s native policy slot, so no model guessed a policy it was never given. Both answered all 887 prompts with no unparseable replies. Frontier models were called through their hosted APIs.
Orbital 2.2.9 was scored on 9 October 2026 through the served gateway on Orbital Cloud. The same Reflex model on the Orbital Edge device runtime scored 96.2% (853 of 887). Competitor rows were measured in July 2026 on the same 887 prompts.
Aona’s internal evaluation on Aona’s policy catalogue. Orbital was trained on this policy distribution with these prompts held out; the comparison models were not. Re-evaluate your own policies, languages y hardware before rollout.
Aona evalúa tanto detecciones fallidas como falsos positivos usando ejemplos etiquetados, negativos difíciles y pruebas retenidas. Para sus políticas, pruebe solicitudes permitidas y no permitidas en el modelo, idioma y despliegue previstos. Este es un enfoque de ingeniería para la precisión, no una promesa de detección perfecta ni una puntuación universal.
ORBITAL 2.2.9 ON HELD-OUT TESTS
Source: Aona’s internal evaluation reports, July to October 2026. Orbital figures measured on Orbital 2.2.9; every competitor scored on the same held-out rows. Results on your own policies, languages and hardware will vary; test them before rollout.
PERSONAL DATA
Orbital against two widely used detectors, on the same held-out slices, scored by the same span scorer.
Structured identifiers, precision
1,000 held-out rows, higher is better
False alarms on 403 look-alikes
lower is better
Names, places y dates in 12 languages, F1
544 prompts, higher is better
When Orbital reports an identifier, it is right: precision 1.000 on the structured slice. Radar validates checksums before it reports, so it raised 9 false alarms on 403 look-alike identifiers, against 96 for Presidio and 242 for GLiNER-PII, and Orbital finds names, places and dates across 12 languages at F1 0.936, more than three times Presidio’s 0.271.
| System | Structured identifiers, precision1,000 held-out rows, higher is better | False alarms on 403 look-alikeslower is better | Names, places y dates in 12 languages, F1544 prompts, higher is better |
|---|---|---|---|
| Aona Orbital 2.2.9Radar + Lens | 1.000 | 9 of 403 | 0.936 |
| Microsoft Presidioopen source, regex y NER | 0.896 | 96 of 403 | 0.271 |
| GLiNER-PIIgliner_multi_pii-v1, zero-shot NER | 0.387 | 242 of 403 | 0.605 |
1,000 held-out rows covering Australian TFN, Singapore NRIC, Spanish NIF, IBAN, crypto addresses, US SSN and ITIN, payment cards and JWTs. Each system was scored only on the identifier types it supports. Radar reports a bare 9-digit tax or social security number only when a keyword names it, which is what keeps its precision at 1.000.
403 adversarial negatives: strings shaped like identifiers that fail validation. 544 labelled prompts in 12 languages, scored on person, location and date, the families all three systems support. Presidio ran with its best configuration, including the AU and SG recognisers. Measured 9 October 2026 on Orbital 2.2.9; competitors re-run the same day.
EVERYDAY DOCUMENTS
Aona measures false alarms as well as misses, because a detector that flags ordinary work gets in the way of it.
Orbital 2.2.9 · 240 business documents
1/240
0.4% falsely flagged
Measured 9 October 2026 on Orbital 2.2.9 through the served gateway: 1 of 240 ordinary business documents with no personal data (0.4%) raised a personal-data alarm on Orbital Cloud, and 2 of 240 (0.8%) on the Orbital Edge device bundle. On the same release, Radar and Lens found 93.6% of 1,845 labelled personal-data values across about 40 types, and scored F1 0.936 on names, places and dates in 12 languages.
EN EL DISPOSITIVO
With Orbital Edge the prompt is checked where it is typed. Sensitive data is redacted or the request is blocked before it leaves the device.
Employee’s machine
Prompt, checked locally
Local Orbital agent
Redact, block or continue
Reflex, Lens y Radar on one prompt, on the device. Median 53 to 76 ms over 38 requests on an Apple M4.
Memory on the device. Agent plus Reflex on a 4-vCPU Linux laptop-class machine, y 509 MB on Windows. On a Mac, Activity Monitor read 354 MB on 6 October 2026.
First install. Installer y every model together: 1,053 MiB on macOS and 1,049 MiB on Windows.
Confirma la capacidad del dispositivo, la disponibilidad de la versión y las comprobaciones que soporta tu cliente.
DENTRO DE CADA MODELO
Determinista donde la regla es exacta. Contextual donde el significado importa. Los identificadores estructurados necesitan validación. Los datos personales necesitan reconocimiento. Las políticas empresariales necesitan contexto. Orbital integra estas técnicas en un sistema de seguridad.
Radar runs 111 deterministic detectors over 87 entity types: credentials and API keys, payment cards, bank details and national and tax identifiers from around 40 jurisdictions. It validates checksums before it reports, sees through invisible characters, look-alike letters and encoded text, and needs no model at all. Add company-specific patterns and allow or block term lists.
Precision 1.000 on structured identifiers · 9 false alarms on 403 look-alike identifiers, against 96 for Presidio y 242 for GLiNER-PII
Each detector has its own scope. A format match alone is not proof that a value is sensitive; validation is what removes the look-alikes.
PONER EN PRÁCTICA UNA POLÍTICA
Un empleado o agente envía una solicitud. Orbital comprueba los datos o la política dentro del alcance; el flujo de trabajo soportado decide si redactar, bloquear o continuar.
Redactar seguimiento para Maya Patel en maya.patel@example.com sobre su cita.
EJEMPLO · REDACT
Eliminar identificadores personales
EDGE OR CLOUD. YOUR REQUIREMENTS.
Orbital runs its own inference, without requiring a separate general-purpose AI service for each Orbital check. Orbital Edge y Orbital Cloud run the same model: you choose where the check runs.
Radar, Lens, Reflex y Vision run inside a local agent on the employee’s machine: about 1 GB to install, 563 MB of memory, and under 0.1 s for a full check on an Apple M4.
When prompts should be checked where they are typed, with no round trip.
Confirma la capacidad del dispositivo, la disponibilidad de la versión y las comprobaciones que soporta tu cliente.
Orbital Cloud runs the same Reflex model on server infrastructure: 93 ms for a verdict y 0.73 s for a 37-guardrail framework on a T4 GPU, without loading anything on the endpoint.
Cuando la inferencia debe usar recursos del servidor en lugar de la capacidad del endpoint.
Cloud nombra el Modelo, no es un destino obligatorio alojado por Aona. Confirma tu configuración.
Radar, Lens, Reflex and Vision are the same Submodels in Orbital Edge and Orbital Cloud, selected according to the configured check and available capabilities. Validate your workload, release and client support; hosting, compute and Aona service costs still apply.
CORRE ORBITAL DONDE ENCAJE
Lleva los cheques compatibles al equipo del empleado, a tus propios servidores o a la nube. La ubicación del procesamiento es una elección, no un requisito para enviar cada cheque a Aona.
Ejecute controles soportados localmente usando recursos del dispositivo. Elija un modelo adecuado y valide cliente y hardware.
Ejecute procesamiento Orbital soportado en infraestructura operada por su organización, dentro de su entorno.
Use su nube de cliente o servidores gestionados por Aona para procesamiento soportado. Dimensione la infraestructura para la carga.
TUS REGLAS, HECHAS PROBABLES
No necesitas reentrenar un modelo para cambiar una regla. Configura la política, aclárala con ejemplos y prueba el límite.
Describe what must not happen. Use a written policy for Reflex, or Radar patterns y term lists.
No divulgar una adquisición antes de la aprobación.
Usa ejemplos etiquetados para aclarar qué debe y qué no debe activar la regla.
Anuncio no aprobado → conflicto de política.
Comprueba solicitudes permitidas y no permitidas por separado. Revisa hallazgos incorrectos antes del despliegue.
Resumen público aprobado → se espera que pase.
Aplica la política probada mediante un cliente Aona soportado o tu integración.
El cliente o integración soportada aplica la respuesta configurada.
EFICIENCIA POR DISEÑO
Una regla simple no debería requerir una llamada de IA de propósito general. Orbital Aona da un camino libre de modelo y su propia inferencia enfocada.
Patrones, listas de términos y validación de suma de verificación pueden ejecutarse sin inferencia de modelo aprendido.
Configure los controles soportados para la tarea. No todas las solicitudes necesitan cada submodelo.
Orbital realiza su propia inferencia en su infraestructura seleccionada, sin alquilar un modelo general para cada control.
Diseñado para un gasto de inferencia menor. Los ahorros reales varían; los costes de computación, alojamiento y Aona servicio siguen aplicándose.
Orbital ejecuta la inferencia de modelos propia de Aona en lugar de requerir una llamada API de IA general de pago para cada control Orbital. Los controles deterministas no necesitan inferencia de modelo; modelos enfocados manejan reconocimiento y contexto de política. Esta arquitectura reduce el gasto en inferencia. El ahorro real depende de la carga y despliegue; costos de computación, hosting y servicio Aona siguen aplicando.
MÁS ALLÁ DE UN SOLO CUADRO DE TEXTO
Dos trabajos diferentes alrededor del conjunto de barandillas. Uno incorpora el contenido de archivos a las comprobaciones; el otro describe el uso de IA.
CONTENIDO DEL DOCUMENTO
Orbital Files prepares content from supported documents, including supported OCR paths, for configured data y policy checks. It is a processing pipeline, not a separate Model or Submodel.
File formats, OCR y original-byte access depend on the path. Vision’s signature detection, in preview, is a separate capability.
Explora la protección de archivosANÁLISIS DE CASOS DE USO · FASE DE PRUEBAS
Where enabled, Orbital’s separate use-case classification can identify activities such as email, research y software development. It describes AI usage; it does not determine the security verdict.
Registrado como capacidad en fase de pruebas con control de bandera, no disponible generalmente. Confirma la disponibilidad del despliegue antes de planificar un lanzamiento.
Explora análisis de adopciónUN VISTAZO MÁS DETALLADO
Evalúa un flujo de trabajo real, no un nombre de modelo aislado.
Orbital is Aona’s own security technology: purpose-built models, deterministic detectors and the evaluation work behind them. It powers sensitive-data recognition and policy checks inside Aona, with supported processing on employee machines, on-premises or in the cloud. Orbital 2 runs the whole check, Radar, Lens and Reflex, on a laptop in under a tenth of a second. Orbital Edge and Orbital Cloud are the Orbital Models, each built from the same four specialist Submodels: Radar, Lens, Reflex and Vision. Availability depends on the release and configuration.
El papel de Orbital aquí es la seguridad de IA: detectar datos sensibles y comprobar solicitudes contra políticas en rutas de uso soportadas para empleados y agentes. No es un reemplazo de las herramientas de IA que tu organización usa para escribir, investigar o programar.
Orbital ejecuta la inferencia de modelos propia de Aona en lugar de requerir una llamada API de IA general de pago para cada control Orbital. Los controles deterministas no necesitan inferencia de modelo; modelos enfocados manejan reconocimiento y contexto de política. Esta arquitectura reduce el gasto en inferencia. El ahorro real depende de la carga y despliegue; costos de computación, hosting y servicio Aona siguen aplicando.
Structured identifiers need validation. Personal data needs recognition. Business policies need context. Orbital brings these different techniques into one security system. Aona evaluates both missed detections and false positives using labelled examples, hard negatives and held-out tests. For your policies, test separate allowed and disallowed requests on the intended Model, language and deployment. This is an engineering approach to accuracy, not a promise of perfect detection or a universal benchmark score.
Aona measures Orbital and the alternatives on the same held-out data. On 887 held-out policy prompts across 52 policies, Orbital 2.2.9 made 96.6% correct decisions, against 80.5% for Granite Guardian 3.1 2B and 76.3% for Llama Guard 3 1B, each given the same written policy. Hosted frontier models scored 96% to 99% but refused 20 to 30 of the prompts. On personal data, Radar and Lens raised 9 false alarms on 403 look-alike identifiers, against 96 for Microsoft Presidio and 242 for GLiNER-PII, and scored F1 0.936 on names, places and dates across 12 languages, against 0.271 and 0.605. Orbital was trained on Aona’s policy distribution with these prompts held out; the comparison models judged them zero-shot. Review the method notes, then evaluate your own workload.
No. Policy accuracy measures reference flag-or-not-flag decisions. The separate false-alarm test measured personal-data detections on 240 ordinary business documents with no personal data: Orbital 2.2.9 flagged 1 (0.4%). That is not a general hallucination rate. No matched cost-per-request comparison is available here. Orbital avoids a separate general-purpose AI API call for its own inference; compute, hosting and Aona service costs still apply.
Orbital supports deterministic rules and model-based checks. Use explicit patterns, term lists and checksum validation when the rule is precise; use learned recognition or Reflex when meaning and policy context matter. Model-based does not necessarily mean random: inference can be repeatable, but a learned verdict still needs evaluation. Configure the supported checks for your task; this is not a promise of automatic escalation whenever a model is uncertain.
Orbital runs Aona’s own model inference instead of requiring a paid general-purpose AI API call for every Orbital check. Deterministic checks need no model inference; focused models handle recognition and policy context. This architecture is designed to reduce inference spend. Actual savings depend on the workload and deployment; compute, hosting and Aona service costs still apply. Deterministic-only operation avoids model inference, and selecting supported checks lets you avoid unnecessary model work. Compare total costs, including infrastructure and service costs, on representative request volumes; there is no universal savings percentage.
Orbital puede identificar datos sensibles y evaluar solicitudes contra políticas configuradas. En una ruta cliente Aona soportada, esos hallazgos pueden informar redacciones o bloqueos. Para una integración API, tu aplicación debe aplicar el veredicto devuelto. Una comprobación de modelo sola no intercepta todas las solicitudes de IA.
Yes. Aona supports customer-authored policy guardrails with policy instructions and labelled examples, answered by Reflex, plus Radar patterns and term lists. This configures the check; it is not per-customer model retraining. Use separate test requests to evaluate allowed and disallowed behaviour before activation, and confirm support in your deployment.
For the check itself, yes. With Orbital Edge, Radar, Lens, Reflex and Vision run in a local agent on the employee’s machine, so the prompt is checked where it is typed and is not sent anywhere to be evaluated. Sensitive data is redacted or the request is blocked before it leaves the device. An allowed request then goes to the AI tool the employee chose, under your policy; confirm logging and telemetry settings for your deployment.
Where the check runs. Both run the same Radar, Lens, Reflex and Vision Submodels: Orbital Edge uses the employee’s machine, Orbital Cloud uses server infrastructure such as a T4 GPU. Model selection does not imply feature parity across clients or deployments.
Aona ofrece opciones separadas para alojamiento backend y procesamiento de prompts. El backend puede ejecutarse en tu nube, localmente o en servidores gestionados por Aona. El procesamiento de prompts puede ejecutarse en el dispositivo del usuario, en tu entorno o en servidores gestionados por Aona. Confirma el Modelo Orbital soportado, funciones y configuración de integración para tu despliegue.
Orbital Files prepara texto de documentos soportados y rutas OCR para guardarraíles configurados. Es una canalización de procesamiento separada, no un Modelo Orbital. Vision inspecciona píxeles originales para regiones con forma de firma y sigue siendo solo en fase de pruebas, no disponible generalmente. Ni la detección de firmas ni un veredicto de política prueban identidad, consentimiento o cumplimiento. Confirma formatos de archivo, acceso a bytes originales y ruta de procesamiento.
The documented release-quality language scope is English, French and Spanish. In Aona’s held-out tests Orbital 2.2.9 scored 99.1% accuracy across 2,802 English, French and Spanish rows, caught 98.8% of non-English attacks, and found names, places and dates across 12 languages at F1 0.936. Other languages are best effort and need use-case-specific evaluation. Test real language patterns, document types and policy examples from your organisation; release-quality scope is not a guarantee of perfect results.
No. Orbital’s use-case analytics describes the activity behind a request, such as research or email. It is separate from the configured guardrail verdict. The documented API integration is flag-gated staging, not generally available; confirm its availability for your deployment.
Lleva tus políticas, solicitudes de representantes e infraestructura preferida. Averigua qué comprobaciones encajan y luego evalúa la precisión y los requisitos operativos para tu implementación.