SECURITY BY DESIGN
Purpose-built for security.
Identify sensitive data and evaluate requests against your policies with Aona’s own security models and deterministic checks.
AONA’S OWN AI SECURITY MODELS
Aona’s own models and rules for precise, cost-efficient AI security.
Orbital is Aona’s own security technology: purpose-built models, deterministic detectors and the evaluation work behind them. It powers sensitive-data recognition and policy checks inside Aona, with supported processing on employee machines, on-premises or in the cloud. Orbital 2 runs the whole check, Radar, Lens and Reflex, on a laptop in under a tenth of a second.
SECURITY BY DESIGN
Identify sensitive data and evaluate requests against your policies with Aona’s own security models and deterministic checks.
PERFORMANCE
Combine precise validation with focused models for efficient security checks. 96.6% correct policy decisions on held-out tests, and a full check in under 0.1 s on a laptop.
DEPLOYMENT CONTROL
Run supported Orbital checks on employee machines, on-premises or in the cloud, aligned with your privacy and deployment requirements.
SPEED
Orbital 2 reads the text once and answers every guardrail in the same pass. In the cloud one verdict comes back in 93 ms and a 37-guardrail framework in 0.73 s; on a laptop the full check takes under a tenth of a second, in a few hundred megabytes of memory.
Response time per request
Median, one request at a time. Lower is better.
In the cloudOrbital Cloud 2.2.9 on a T4 GPU, measured 9 October 2026
On a laptopApple M4, Reflex on the Mac GPU
~20 ms
Per guardrail in a full framework
37 guardrails in 0.73 s on Orbital Cloud, every one evaluated, because Reflex reads the text once and answers them all in the same pass.
Medians, one request at a time, with the 95th percentile where it was measured. In the cloud every guardrail of every framework was evaluated. On the laptop, the full check was measured on the installed Orbital 2.2.9 agent and the framework timings on the same Orbital 2 Reflex model.
| Where | Measure | Median | Detail |
|---|---|---|---|
| In the cloudOrbital Cloud 2.2.9 on a T4 GPU, measured 9 October 2026 | One verdictaverage-length prompt, 120 requests | 93 ms | 121 ms at p95 |
| In the cloudOrbital Cloud 2.2.9 on a T4 GPU, measured 9 October 2026 | Framework of 19 guardrailsevery guardrail evaluated, 40 requests | 393 ms | 445 ms at p95 |
| In the cloudOrbital Cloud 2.2.9 on a T4 GPU, measured 9 October 2026 | Framework of 37 guardrailsevery guardrail evaluated, 40 requests | 0.73 s | 777 ms at p95 |
| On a laptopApple M4, Reflex on the Mac GPU | Full check on one promptReflex, Lens and Radar together, 38 requests | <0.1 s | medians of 53 and 76 ms in two runs |
| On a laptopApple M4, Reflex on the Mac GPU | Framework of 8 guardrailsone request reads the text once | 390 ms | |
| On a laptopApple M4, Reflex on the Mac GPU | Framework of 37 guardrailsone request reads the text once | 1.5 s |
ACCURACY AGAINST OTHER GUARD MODELS
Aona scores Orbital and the alternatives on the same held-out prompts, with the same policy text. On both jobs Orbital is built for, deciding policy and finding personal data, it leads the purpose-built guard models and detectors we tested.
Policy guardrails
887 held-out prompts across 52 policies. 430 violations, 457 allowed requests.
Aona Orbital
Purpose-built guard models
Frontier general-purpose models, hosted API
Orbital decides policy like a frontier model, on the employee’s own machine. The hosted frontier models refused 20 to 30 prompts, mostly the encoded and injection attacks a guardrail exists to read, and were scored only on the rest. Orbital answered all 887.
Accuracy is agreement with the reference decision: catch the violation, allow the benign request. A model that answered “allowed” every time would score 51.5%.
Aona ran Granite Guardian and Llama Guard on its own Tesla T4 GPU with each policy injected into the model’s native policy slot, so no model guessed a policy it was never given. Both answered all 887 prompts with no unparseable replies. Frontier models were called through their hosted APIs.
Orbital 2.2.9 was scored on 9 October 2026 through the served gateway on Orbital Cloud. The same Reflex model on the Orbital Edge device runtime scored 96.2% (853 of 887). Competitor rows were measured in July 2026 on the same 887 prompts.
Aona’s internal evaluation on Aona’s policy catalogue. Orbital was trained on this policy distribution with these prompts held out; the comparison models were not. Re-evaluate your own policies, languages and hardware before rollout.
Aona evaluates both missed detections and false positives using labelled examples, hard negatives and held-out tests. For your policies, test separate allowed and disallowed requests on the intended Model, language and deployment. This is an engineering approach to accuracy, not a promise of perfect detection or a universal benchmark score.
ORBITAL 2.2.9 ON HELD-OUT TESTS
Source: Aona’s internal evaluation reports, July to October 2026. Orbital figures measured on Orbital 2.2.9; every competitor scored on the same held-out rows. Results on your own policies, languages and hardware will vary; test them before rollout.
PERSONAL DATA
Orbital against two widely used detectors, on the same held-out slices, scored by the same span scorer.
Structured identifiers, precision
1,000 held-out rows, higher is better
False alarms on 403 look-alikes
lower is better
Names, places and dates in 12 languages, F1
544 prompts, higher is better
When Orbital reports an identifier, it is right: precision 1.000 on the structured slice. Radar validates checksums before it reports, so it raised 9 false alarms on 403 look-alike identifiers, against 96 for Presidio and 242 for GLiNER-PII, and Orbital finds names, places and dates across 12 languages at F1 0.936, more than three times Presidio’s 0.271.
| System | Structured identifiers, precision1,000 held-out rows, higher is better | False alarms on 403 look-alikeslower is better | Names, places and dates in 12 languages, F1544 prompts, higher is better |
|---|---|---|---|
| Aona Orbital 2.2.9Radar + Lens | 1.000 | 9 of 403 | 0.936 |
| Microsoft Presidioopen source, regex and NER | 0.896 | 96 of 403 | 0.271 |
| GLiNER-PIIgliner_multi_pii-v1, zero-shot NER | 0.387 | 242 of 403 | 0.605 |
1,000 held-out rows covering Australian TFN, Singapore NRIC, Spanish NIF, IBAN, crypto addresses, US SSN and ITIN, payment cards and JWTs. Each system was scored only on the identifier types it supports. Radar reports a bare 9-digit tax or social security number only when a keyword names it, which is what keeps its precision at 1.000.
403 adversarial negatives: strings shaped like identifiers that fail validation. 544 labelled prompts in 12 languages, scored on person, location and date, the families all three systems support. Presidio ran with its best configuration, including the AU and SG recognisers. Measured 9 October 2026 on Orbital 2.2.9; competitors re-run the same day.
EVERYDAY DOCUMENTS
Aona measures false alarms as well as misses, because a detector that flags ordinary work gets in the way of it.
Orbital 2.2.9 · 240 business documents
1/240
0.4% falsely flagged
Measured 9 October 2026 on Orbital 2.2.9 through the served gateway: 1 of 240 ordinary business documents with no personal data (0.4%) raised a personal-data alarm on Orbital Cloud, and 2 of 240 (0.8%) on the Orbital Edge device bundle. On the same release, Radar and Lens found 93.6% of 1,845 labelled personal-data values across about 40 types, and scored F1 0.936 on names, places and dates in 12 languages.
ON THE DEVICE
With Orbital Edge the prompt is checked where it is typed. Sensitive data is redacted or the request is blocked before it leaves the device.
Employee’s machine
Prompt, checked locally
Local Orbital agent
Redact, block or continue
Reflex, Lens and Radar on one prompt, on the device. Median 53 to 76 ms over 38 requests on an Apple M4.
Memory on the device. Agent plus Reflex on a 4-vCPU Linux laptop-class machine, and 509 MB on Windows. On a Mac, Activity Monitor read 354 MB on 6 October 2026.
First install. Installer and every model together: 1,053 MiB on macOS and 1,049 MiB on Windows.
Confirm device capacity, release availability and the checks your client supports.
INSIDE EACH MODEL
Deterministic where the rule is exact. Contextual where meaning matters. Structured identifiers need validation. Personal data needs recognition. Business policies need context. Orbital brings these different techniques into one security system.
Radar runs 111 deterministic detectors over 87 entity types: credentials and API keys, payment cards, bank details and national and tax identifiers from around 40 jurisdictions. It validates checksums before it reports, sees through invisible characters, look-alike letters and encoded text, and needs no model at all. Add company-specific patterns and allow or block term lists.
Precision 1.000 on structured identifiers · 9 false alarms on 403 look-alike identifiers, against 96 for Presidio and 242 for GLiNER-PII
Each detector has its own scope. A format match alone is not proof that a value is sensitive; validation is what removes the look-alikes.
PUT A POLICY INTO PRACTICE
An employee or agent submits a request. Orbital checks the data or policy in scope; the supported workflow decides whether to redact, block or continue.
Draft a follow-up for Maya Patel at maya.patel@example.com about her appointment.
EXAMPLE · REDACT
Remove personal identifiers
EDGE OR CLOUD. YOUR REQUIREMENTS.
Orbital runs its own inference, without requiring a separate general-purpose AI service for each Orbital check. Orbital Edge and Orbital Cloud run the same model: you choose where the check runs.
Radar, Lens, Reflex and Vision run inside a local agent on the employee’s machine: about 1 GB to install, 563 MB of memory, and under 0.1 s for a full check on an Apple M4.
When prompts should be checked where they are typed, with no round trip.
Confirm device capacity, release availability and the checks your client supports.
Orbital Cloud runs the same Reflex model on server infrastructure: 93 ms for a verdict and 0.73 s for a 37-guardrail framework on a T4 GPU, without loading anything on the endpoint.
When inference should use server resources instead of endpoint capacity.
Cloud names the Model, not a mandatory Aona-hosted destination. Confirm your configuration.
Radar, Lens, Reflex and Vision are the same Submodels in Orbital Edge and Orbital Cloud, selected according to the configured check and available capabilities. Validate your workload, release and client support; hosting, compute and Aona service costs still apply.
RUN ORBITAL WHERE IT FITS
Bring supported checks to the employee’s machine, your own servers or the cloud. Processing location is a choice, not a requirement to send every check to Aona.
Run supported checks locally using the device’s resources. Choose a suitable Model and validate the client and hardware.
Run supported Orbital processing on infrastructure your organisation operates, inside your own environment.
Use your customer cloud or Aona-managed servers for supported processing. Size the infrastructure for the workload.
YOUR RULES, MADE TESTABLE
You do not need to retrain a model to change a rule. Configure the policy, clarify it with examples and test the boundary.
Describe what must not happen. Use a written policy for Reflex, or Radar patterns and term lists.
Do not disclose an acquisition before approval.
Use labelled examples to clarify what should and should not trigger the rule.
Unapproved announcement → policy conflict.
Check separate allowed and disallowed requests. Review incorrect findings before rollout.
Approved public summary → expected to pass.
Apply the tested policy through a supported Aona client or your integration.
The supported client or integration applies the configured response.
EFFICIENCY BY DESIGN
A simple rule should not require a general-purpose AI call. Orbital gives Aona a model-free path and its own focused inference.
Patterns, term lists and checksum validation can run without learned-model inference.
Configure the supported checks for the task. Not every request needs every Submodel.
Orbital performs its own inference on your selected infrastructure, without renting a general-purpose model for each check.
Designed for lower inference spend. Actual savings vary; compute, hosting and Aona service costs still apply.
Orbital runs Aona’s own model inference instead of requiring a paid general-purpose AI API call for every Orbital check. Deterministic checks need no model inference; focused models handle recognition and policy context. This architecture is designed to reduce inference spend. Actual savings depend on the workload and deployment; compute, hosting and Aona service costs still apply.
BEYOND A SINGLE TEXT BOX
Two different jobs around the guardrail suite. One brings file content into checks; the other describes AI use.
DOCUMENT CONTENT
Orbital Files prepares content from supported documents, including supported OCR paths, for configured data and policy checks. It is a processing pipeline, not a separate Model or Submodel.
File formats, OCR and original-byte access depend on the path. Vision’s signature detection, in preview, is a separate capability.
Explore file protectionUSE-CASE ANALYTICS · STAGING
Where enabled, Orbital’s separate use-case classification can identify activities such as email, research and software development. It describes AI usage; it does not determine the security verdict.
Recorded as flag-gated staging capability, not generally available. Confirm deployment availability before planning a rollout.
Explore adoption analyticsA CLOSER LOOK
Evaluate a real workflow, not a model name in isolation.
Orbital is Aona’s own security technology: purpose-built models, deterministic detectors and the evaluation work behind them. It powers sensitive-data recognition and policy checks inside Aona, with supported processing on employee machines, on-premises or in the cloud. Orbital 2 runs the whole check, Radar, Lens and Reflex, on a laptop in under a tenth of a second. Orbital Edge and Orbital Cloud are the Orbital Models, each built from the same four specialist Submodels: Radar, Lens, Reflex and Vision. Availability depends on the release and configuration.
Orbital’s role here is AI security: detecting sensitive data and checking requests against policies on supported employee and agent use paths. It is not a replacement for the AI tools your organisation uses to write, research or code.
Orbital runs Aona’s own model inference instead of requiring a paid general-purpose AI API call for every Orbital check. Deterministic checks need no model inference; focused models handle recognition and policy context. This architecture is designed to reduce inference spend. Actual savings depend on the workload and deployment; compute, hosting and Aona service costs still apply.
Structured identifiers need validation. Personal data needs recognition. Business policies need context. Orbital brings these different techniques into one security system. Aona evaluates both missed detections and false positives using labelled examples, hard negatives and held-out tests. For your policies, test separate allowed and disallowed requests on the intended Model, language and deployment. This is an engineering approach to accuracy, not a promise of perfect detection or a universal benchmark score.
Aona measures Orbital and the alternatives on the same held-out data. On 887 held-out policy prompts across 52 policies, Orbital 2.2.9 made 96.6% correct decisions, against 80.5% for Granite Guardian 3.1 2B and 76.3% for Llama Guard 3 1B, each given the same written policy. Hosted frontier models scored 96% to 99% but refused 20 to 30 of the prompts. On personal data, Radar and Lens raised 9 false alarms on 403 look-alike identifiers, against 96 for Microsoft Presidio and 242 for GLiNER-PII, and scored F1 0.936 on names, places and dates across 12 languages, against 0.271 and 0.605. Orbital was trained on Aona’s policy distribution with these prompts held out; the comparison models judged them zero-shot. Review the method notes, then evaluate your own workload.
No. Policy accuracy measures reference flag-or-not-flag decisions. The separate false-alarm test measured personal-data detections on 240 ordinary business documents with no personal data: Orbital 2.2.9 flagged 1 (0.4%). That is not a general hallucination rate. No matched cost-per-request comparison is available here. Orbital avoids a separate general-purpose AI API call for its own inference; compute, hosting and Aona service costs still apply.
Orbital supports deterministic rules and model-based checks. Use explicit patterns, term lists and checksum validation when the rule is precise; use learned recognition or Reflex when meaning and policy context matter. Model-based does not necessarily mean random: inference can be repeatable, but a learned verdict still needs evaluation. Configure the supported checks for your task; this is not a promise of automatic escalation whenever a model is uncertain.
Orbital runs Aona’s own model inference instead of requiring a paid general-purpose AI API call for every Orbital check. Deterministic checks need no model inference; focused models handle recognition and policy context. This architecture is designed to reduce inference spend. Actual savings depend on the workload and deployment; compute, hosting and Aona service costs still apply. Deterministic-only operation avoids model inference, and selecting supported checks lets you avoid unnecessary model work. Compare total costs, including infrastructure and service costs, on representative request volumes; there is no universal savings percentage.
Orbital can identify sensitive data and evaluate requests against configured policies. On a supported Aona client path, those findings can inform redaction or blocking. For an API integration, your application must apply the returned verdict. A model check alone does not intercept every AI request.
Yes. Aona supports customer-authored policy guardrails with policy instructions and labelled examples, answered by Reflex, plus Radar patterns and term lists. This configures the check; it is not per-customer model retraining. Use separate test requests to evaluate allowed and disallowed behaviour before activation, and confirm support in your deployment.
For the check itself, yes. With Orbital Edge, Radar, Lens, Reflex and Vision run in a local agent on the employee’s machine, so the prompt is checked where it is typed and is not sent anywhere to be evaluated. Sensitive data is redacted or the request is blocked before it leaves the device. An allowed request then goes to the AI tool the employee chose, under your policy; confirm logging and telemetry settings for your deployment.
Where the check runs. Both run the same Radar, Lens, Reflex and Vision Submodels: Orbital Edge uses the employee’s machine, Orbital Cloud uses server infrastructure such as a T4 GPU. Model selection does not imply feature parity across clients or deployments.
Aona offers separate choices for backend hosting and prompt processing. The backend can run in your cloud, on-premises or on Aona-managed servers. Prompt processing can run on the user device, in your environment or on Aona-managed servers. Confirm the supported Orbital Model, feature and integration configuration for your deployment.
Orbital Files prepares text from supported documents and OCR paths for configured guardrails. It is a separate processing pipeline, not an Orbital Model. Vision inspects original pixels for signature-shaped regions and remains staging-only, not generally available. Neither signature detection nor a policy verdict proves identity, consent or compliance. Confirm file formats, original-byte access and the processing path.
The documented release-quality language scope is English, French and Spanish. In Aona’s held-out tests Orbital 2.2.9 scored 99.1% accuracy across 2,802 English, French and Spanish rows, caught 98.8% of non-English attacks, and found names, places and dates across 12 languages at F1 0.936. Other languages are best effort and need use-case-specific evaluation. Test real language patterns, document types and policy examples from your organisation; release-quality scope is not a guarantee of perfect results.
No. Orbital’s use-case analytics describes the activity behind a request, such as research or email. It is separate from the configured guardrail verdict. The documented API integration is flag-gated staging, not generally available; confirm its availability for your deployment.
Bring your policies, representative requests and preferred infrastructure. See which checks fit, then evaluate accuracy and operating requirements for your rollout.