30 Days Gen AI Risk Trial -Start Now
Skip to main content

AONA’S OWN AI SECURITY MODELS

Meet Orbital.

Aona’s own models and rules for precise, cost-efficient AI security.

for a full check on a laptop
<0.1 s
correct policy decisions
96.6%
false personal-data alarms on business documents
0.4%
of memory on the device
563 MB
Measured by Aona against other models. See the results

Our technology.
Your security advantage.

Orbital is Aona’s own security technology: purpose-built models, deterministic detectors and the evaluation work behind them. It powers sensitive-data recognition and policy checks inside Aona, with supported processing on employee machines, on-premises or in the cloud. Orbital 2 runs the whole check, Radar, Lens and Reflex, on a laptop in under a tenth of a second.

01

SECURITY BY DESIGN

Purpose-built for security.

Identify sensitive data and evaluate requests against your policies with Aona’s own security models and deterministic checks.

02

PERFORMANCE

Accuracy and speed.

Combine precise validation with focused models for efficient security checks. 96.6% correct policy decisions on held-out tests, and a full check in under 0.1 s on a laptop.

03

DEPLOYMENT CONTROL

Your infrastructure. Your control.

Run supported Orbital checks on employee machines, on-premises or in the cloud, aligned with your privacy and deployment requirements.

SPEED

Fast enough to check
every prompt.

Orbital 2 reads the text once and answers every guardrail in the same pass. In the cloud one verdict comes back in 93 ms and a 37-guardrail framework in 0.73 s; on a laptop the full check takes under a tenth of a second, in a few hundred megabytes of memory.

Response time per request

Median, one request at a time. Lower is better.

In the cloudOrbital Cloud 2.2.9 on a T4 GPU, measured 9 October 2026

One verdict93 ms
Framework of 19 guardrails393 ms
Framework of 37 guardrails0.73 s

On a laptopApple M4, Reflex on the Mac GPU

Full check on one prompt<0.1 s
Framework of 8 guardrails390 ms
Framework of 37 guardrails1.5 s

~20 ms

Per guardrail in a full framework

37 guardrails in 0.73 s on Orbital Cloud, every one evaluated, because Reflex reads the text once and answers them all in the same pass.

How we measured speed

Medians, one request at a time, with the 95th percentile where it was measured. In the cloud every guardrail of every framework was evaluated. On the laptop, the full check was measured on the installed Orbital 2.2.9 agent and the framework timings on the same Orbital 2 Reflex model.

WhereMeasureMedianDetail
In the cloudOrbital Cloud 2.2.9 on a T4 GPU, measured 9 October 2026One verdictaverage-length prompt, 120 requests93 ms121 ms at p95
In the cloudOrbital Cloud 2.2.9 on a T4 GPU, measured 9 October 2026Framework of 19 guardrailsevery guardrail evaluated, 40 requests393 ms445 ms at p95
In the cloudOrbital Cloud 2.2.9 on a T4 GPU, measured 9 October 2026Framework of 37 guardrailsevery guardrail evaluated, 40 requests0.73 s777 ms at p95
On a laptopApple M4, Reflex on the Mac GPUFull check on one promptReflex, Lens and Radar together, 38 requests<0.1 smedians of 53 and 76 ms in two runs
On a laptopApple M4, Reflex on the Mac GPUFramework of 8 guardrailsone request reads the text once390 ms
On a laptopApple M4, Reflex on the Mac GPUFramework of 37 guardrailsone request reads the text once1.5 s

ACCURACY AGAINST OTHER GUARD MODELS

Security decisions.
Measured, not assumed.

Aona scores Orbital and the alternatives on the same held-out prompts, with the same policy text. On both jobs Orbital is built for, deciding policy and finding personal data, it leads the purpose-built guard models and detectors we tested.

Policy guardrails

887 held-out prompts across 52 policies. 430 violations, 457 allowed requests.

Aona Orbital

Orbital 2.2.9Reflex, the Orbital 2 decision model96.6%857 of 887 correct

Purpose-built guard models

Granite Guardian 3.1 2BIBM, open weights80.5%714 of 887 correct
Llama Guard 3 1BMeta, open weights76.3%677 of 887 correct

Frontier general-purpose models, hosted API

Mistral-Large-3refused 30 prompts99%857 prompts scored
GPT-5.1refused 20 prompts97%867 prompts scored
DeepSeek-V3.2refused 30 prompts96%857 prompts scored
Always answer “allowed”Trivial floor51.5%887 prompts
Every model received the same written policy, in its own native policy slot. Orbital never saw these prompts in training; the other models judged them zero-shot.

Orbital decides policy like a frontier model, on the employee’s own machine. The hosted frontier models refused 20 to 30 prompts, mostly the encoded and injection attacks a guardrail exists to read, and were scored only on the rest. Orbital answered all 887.

How the policy comparison was run

What was measured

Accuracy is agreement with the reference decision: catch the violation, allow the benign request. A model that answered “allowed” every time would score 51.5%.

How the comparison was run

Aona ran Granite Guardian and Llama Guard on its own Tesla T4 GPU with each policy injected into the model’s native policy slot, so no model guessed a policy it was never given. Both answered all 887 prompts with no unparseable replies. Frontier models were called through their hosted APIs.

Which Orbital

Orbital 2.2.9 was scored on 9 October 2026 through the served gateway on Orbital Cloud. The same Reflex model on the Orbital Edge device runtime scored 96.2% (853 of 887). Competitor rows were measured in July 2026 on the same 887 prompts.

Scope

Aona’s internal evaluation on Aona’s policy catalogue. Orbital was trained on this policy distribution with these prompts held out; the comparison models were not. Re-evaluate your own policies, languages and hardware before rollout.

How accuracy is evaluated

Aona evaluates both missed detections and false positives using labelled examples, hard negatives and held-out tests. For your policies, test separate allowed and disallowed requests on the intended Model, language and deployment. This is an engineering approach to accuracy, not a promise of perfect detection or a universal benchmark score.

ORBITAL 2.2.9 ON HELD-OUT TESTS

Attacks, near misses and languages.

of attacks caught by the intent screen
99.0%
104 of 105 held-out attacks, 80 of them not in English
false alarms on near-miss requests
0.9%
1 of 108 benign look-alike requests
accuracy in English, French and Spanish
99.1%
2,802 held-out guardrail and intent rows
of data-leak and override probes caught
95.5%
191 of 200 held-out leak-critical probes

Source: Aona’s internal evaluation reports, July to October 2026. Orbital figures measured on Orbital 2.2.9; every competitor scored on the same held-out rows. Results on your own policies, languages and hardware will vary; test them before rollout.

PERSONAL DATA

Precise on identifiers.
Accurate in 12 languages.

Orbital against two widely used detectors, on the same held-out slices, scored by the same span scorer.

Structured identifiers, precision

1,000 held-out rows, higher is better

Aona Orbital 2.2.91.000
Microsoft Presidio0.896
GLiNER-PII0.387

False alarms on 403 look-alikes

lower is better

Aona Orbital 2.2.99 of 403
Microsoft Presidio96 of 403
GLiNER-PII242 of 403

Names, places and dates in 12 languages, F1

544 prompts, higher is better

Aona Orbital 2.2.90.936
Microsoft Presidio0.271
GLiNER-PII0.605

When Orbital reports an identifier, it is right: precision 1.000 on the structured slice. Radar validates checksums before it reports, so it raised 9 false alarms on 403 look-alike identifiers, against 96 for Presidio and 242 for GLiNER-PII, and Orbital finds names, places and dates across 12 languages at F1 0.936, more than three times Presidio’s 0.271.

How the personal-data comparison was run
SystemStructured identifiers, precision1,000 held-out rows, higher is betterFalse alarms on 403 look-alikeslower is betterNames, places and dates in 12 languages, F1544 prompts, higher is better
Aona Orbital 2.2.9Radar + Lens1.0009 of 4030.936
Microsoft Presidioopen source, regex and NER0.89696 of 4030.271
GLiNER-PIIgliner_multi_pii-v1, zero-shot NER0.387242 of 4030.605

Structured identifiers

1,000 held-out rows covering Australian TFN, Singapore NRIC, Spanish NIF, IBAN, crypto addresses, US SSN and ITIN, payment cards and JWTs. Each system was scored only on the identifier types it supports. Radar reports a bare 9-digit tax or social security number only when a keyword names it, which is what keeps its precision at 1.000.

Look-alikes and languages

403 adversarial negatives: strings shaped like identifiers that fail validation. 544 labelled prompts in 12 languages, scored on person, location and date, the families all three systems support. Presidio ran with its best configuration, including the AU and SG recognisers. Measured 9 October 2026 on Orbital 2.2.9; competitors re-run the same day.

EVERYDAY DOCUMENTS

Quiet on everyday documents.
1 of 240 flagged.

Aona measures false alarms as well as misses, because a detector that flags ordinary work gets in the way of it.

Orbital 2.2.9 · 240 business documents

1/240

0.4% falsely flagged

9 October 2026 · 240 business documents with no personal data, served gateway. False alarms are incorrect sensitive-data detections, not a general hallucination rate.
Detection quality and test conditions

Measured 9 October 2026 on Orbital 2.2.9 through the served gateway: 1 of 240 ordinary business documents with no personal data (0.4%) raised a personal-data alarm on Orbital Cloud, and 2 of 240 (0.8%) on the Orbital Edge device bundle. On the same release, Radar and Lens found 93.6% of 1,845 labelled personal-data values across about 40 types, and scored F1 0.936 on names, places and dates in 12 languages.

ON THE DEVICE

The whole check, on the laptop.

With Orbital Edge the prompt is checked where it is typed. Sensitive data is redacted or the request is blocked before it leaves the device.

for a full check on a laptop
<0.1 s
Memory on the device
563 MB
First install
~1 GB
How we measured the footprint

Reflex, Lens and Radar on one prompt, on the device. Median 53 to 76 ms over 38 requests on an Apple M4.

Memory on the device. Agent plus Reflex on a 4-vCPU Linux laptop-class machine, and 509 MB on Windows. On a Mac, Activity Monitor read 354 MB on 6 October 2026.

First install. Installer and every model together: 1,053 MiB on macOS and 1,049 MiB on Windows.

Confirm device capacity, release availability and the checks your client supports.

INSIDE EACH MODEL

The right check
for the right question.

Deterministic where the rule is exact. Contextual where meaning matters. Structured identifiers need validation. Personal data needs recognition. Business policies need context. Orbital brings these different techniques into one security system.

AONA ORBITAL RADAR

Secrets and identifiers have recognisable signals.

Radar runs 111 deterministic detectors over 87 entity types: credentials and API keys, payment cards, bank details and national and tax identifiers from around 40 jurisdictions. It validates checksums before it reports, sees through invisible characters, look-alike letters and encoded text, and needs no model at all. Add company-specific patterns and allow or block term lists.

Measured against Microsoft Presidio

Precision 1.000 on structured identifiers · 9 false alarms on 403 look-alike identifiers, against 96 for Presidio and 242 for GLiNER-PII

Structured findings in milliseconds, without a model call

Protect business identifiers, not just personal details.

Each detector has its own scope. A format match alone is not proof that a value is sensitive; validation is what removes the look-alikes.

All four Submodels at a glance
Radar
Radar runs 111 deterministic detectors over 87 entity types: credentials and API keys, payment cards, bank details and national and tax identifiers from around 40 jurisdictions. It validates checksums before it reports, sees through invisible characters, look-alike letters and encoded text, and needs no model at all. Add company-specific patterns and allow or block term lists. Each detector has its own scope. A format match alone is not proof that a value is sensitive; validation is what removes the look-alikes.
Lens
Lens is Aona’s own encoder model for personal information in free text: names, street addresses, cities, postcodes and dates that format checks can miss. It reads the whole prompt, in many languages, and hands every span to the redaction step with exact character positions. Detection depends on the text and supported language. Test the examples that matter to your organisation.
Reflex
Reflex is the Orbital 2 decision model. It reads the request once and answers every configured guardrail, your own written policies included, with a calibrated yes or no, generating no text. That is why a whole framework of guardrails comes back in a fraction of a second on an ordinary laptop. Examples configure the check; they do not retrain a private model. Reflex decides; Radar and Lens provide the redaction spans. Validate the results on your own policies.
Vision · Preview
Vision is Aona’s own visual detector for handwritten signatures in images and document pages. It looks at the original pixels, page by page and in overlapping tiles, so a small signature is not lost, and on Orbital Edge the pixels never leave the device. Preview capability, not generally available. It does not identify the signer, authenticate a signature or prove consent.

PUT A POLICY INTO PRACTICE

The same AI task.
A different outcome.

An employee or agent submits a request. Orbital checks the data or policy in scope; the supported workflow decides whether to redact, block or continue.

The model evaluates.
A supported workflow applies the decision.
Employee or agent prompt

Draft a follow-up for Maya Patel at maya.patel@example.com about her appointment.

Maya Patel · maya.patel@example.com

EXAMPLE · REDACT

Personal details found

Rule

Remove personal identifiers

Draft a follow-up for [PERSON] at [EMAIL] about her appointment.
Keep the useful task. Replace the personal details.
Illustration complete. Example response: Redact. Keep the useful task. Replace the personal details.

EDGE OR CLOUD. YOUR REQUIREMENTS.

Choose where it runs.
Keep your policy.

Orbital runs its own inference, without requiring a separate general-purpose AI service for each Orbital check. Orbital Edge and Orbital Cloud run the same model: you choose where the check runs.

ON THE DEVICE

Orbital Edge

The whole check, on the laptop.

Radar, Lens, Reflex and Vision run inside a local agent on the employee’s machine: about 1 GB to install, 563 MB of memory, and under 0.1 s for a full check on an Apple M4.

CONSIDER IT

When prompts should be checked where they are typed, with no round trip.

Confirm device capacity, release availability and the checks your client supports.

SERVER-SIDE

Orbital Cloud

The same model, on a GPU.

Orbital Cloud runs the same Reflex model on server infrastructure: 93 ms for a verdict and 0.73 s for a 37-guardrail framework on a T4 GPU, without loading anything on the endpoint.

CONSIDER IT

When inference should use server resources instead of endpoint capacity.

Cloud names the Model, not a mandatory Aona-hosted destination. Confirm your configuration.

Radar, Lens, Reflex and Vision are the same Submodels in Orbital Edge and Orbital Cloud, selected according to the configured check and available capabilities. Validate your workload, release and client support; hosting, compute and Aona service costs still apply.

RUN ORBITAL WHERE IT FITS

Your infrastructure.
Orbital’s intelligence.

Bring supported checks to the employee’s machine, your own servers or the cloud. Processing location is a choice, not a requirement to send every check to Aona.

Employee machine

Run supported checks locally using the device’s resources. Choose a suitable Model and validate the client and hardware.

On-premises

Run supported Orbital processing on infrastructure your organisation operates, inside your own environment.

Cloud

Use your customer cloud or Aona-managed servers for supported processing. Size the infrastructure for the workload.

YOUR RULES, MADE TESTABLE

From policy document
to a working guardrail.

You do not need to retrain a model to change a rule. Configure the policy, clarify it with examples and test the boundary.

  1. 01

    Write the rule

    Describe what must not happen. Use a written policy for Reflex, or Radar patterns and term lists.

    ILLUSTRATIVE EXAMPLE

    Do not disclose an acquisition before approval.

  2. 02

    Add examples

    Use labelled examples to clarify what should and should not trigger the rule.

    ILLUSTRATIVE EXAMPLE

    Unapproved announcement → policy conflict.

  3. 03

    Test the boundary

    Check separate allowed and disallowed requests. Review incorrect findings before rollout.

    ILLUSTRATIVE EXAMPLE

    Approved public summary → expected to pass.

  4. 04

    Activate the control

    Apply the tested policy through a supported Aona client or your integration.

    ILLUSTRATIVE EXAMPLE

    The supported client or integration applies the configured response.

Explore policy enforcement

EFFICIENCY BY DESIGN

Use the compute
the task needs.

A simple rule should not require a general-purpose AI call. Orbital gives Aona a model-free path and its own focused inference.

  1. 01

    No model for exact rules

    Patterns, term lists and checksum validation can run without learned-model inference.

  2. 02

    Focused models for context

    Configure the supported checks for the task. Not every request needs every Submodel.

  3. 03

    No per-check general AI API charge

    Orbital performs its own inference on your selected infrastructure, without renting a general-purpose model for each check.

Designed for lower inference spend. Actual savings vary; compute, hosting and Aona service costs still apply.

What this means for operating costs

Orbital runs Aona’s own model inference instead of requiring a paid general-purpose AI API call for every Orbital check. Deterministic checks need no model inference; focused models handle recognition and policy context. This architecture is designed to reduce inference spend. Actual savings depend on the workload and deployment; compute, hosting and Aona service costs still apply.

BEYOND A SINGLE TEXT BOX

Document checks.
Usage context.

Two different jobs around the guardrail suite. One brings file content into checks; the other describes AI use.

DOCUMENT CONTENT

The same checks, beyond the prompt.

Orbital Files prepares content from supported documents, including supported OCR paths, for configured data and policy checks. It is a processing pipeline, not a separate Model or Submodel.

File formats, OCR and original-byte access depend on the path. Vision’s signature detection, in preview, is a separate capability.

Explore file protection

USE-CASE ANALYTICS · STAGING

Understand the work behind the request.

Where enabled, Orbital’s separate use-case classification can identify activities such as email, research and software development. It describes AI usage; it does not determine the security verdict.

Recorded as flag-gated staging capability, not generally available. Confirm deployment availability before planning a rollout.

Explore adoption analytics

A CLOSER LOOK

Good questions.
Clear boundaries.

Evaluate a real workflow, not a model name in isolation.

What are Aona Orbital Models?

Orbital is Aona’s own security technology: purpose-built models, deterministic detectors and the evaluation work behind them. It powers sensitive-data recognition and policy checks inside Aona, with supported processing on employee machines, on-premises or in the cloud. Orbital 2 runs the whole check, Radar, Lens and Reflex, on a laptop in under a tenth of a second. Orbital Edge and Orbital Cloud are the Orbital Models, each built from the same four specialist Submodels: Radar, Lens, Reflex and Vision. Availability depends on the release and configuration.

Is Orbital another AI assistant for employees?

Orbital’s role here is AI security: detecting sensitive data and checking requests against policies on supported employee and agent use paths. It is not a replacement for the AI tools your organisation uses to write, research or code.

Do Orbital checks require a separate general-purpose AI API?

Orbital runs Aona’s own model inference instead of requiring a paid general-purpose AI API call for every Orbital check. Deterministic checks need no model inference; focused models handle recognition and policy context. This architecture is designed to reduce inference spend. Actual savings depend on the workload and deployment; compute, hosting and Aona service costs still apply.

How is Orbital designed to improve accuracy?

Structured identifiers need validation. Personal data needs recognition. Business policies need context. Orbital brings these different techniques into one security system. Aona evaluates both missed detections and false positives using labelled examples, hard negatives and held-out tests. For your policies, test separate allowed and disallowed requests on the intended Model, language and deployment. This is an engineering approach to accuracy, not a promise of perfect detection or a universal benchmark score.

How does Orbital compare with other security models?

Aona measures Orbital and the alternatives on the same held-out data. On 887 held-out policy prompts across 52 policies, Orbital 2.2.9 made 96.6% correct decisions, against 80.5% for Granite Guardian 3.1 2B and 76.3% for Llama Guard 3 1B, each given the same written policy. Hosted frontier models scored 96% to 99% but refused 20 to 30 of the prompts. On personal data, Radar and Lens raised 9 false alarms on 403 look-alike identifiers, against 96 for Microsoft Presidio and 242 for GLiNER-PII, and scored F1 0.936 on names, places and dates across 12 languages, against 0.271 and 0.605. Orbital was trained on Aona’s policy distribution with these prompts held out; the comparison models judged them zero-shot. Review the method notes, then evaluate your own workload.

Do the results measure hallucinations or cost savings?

No. Policy accuracy measures reference flag-or-not-flag decisions. The separate false-alarm test measured personal-data detections on 240 ordinary business documents with no personal data: Orbital 2.2.9 flagged 1 (0.4%). That is not a general hallucination rate. No matched cost-per-request comparison is available here. Orbital avoids a separate general-purpose AI API call for its own inference; compute, hosting and Aona service costs still apply.

Does Orbital support deterministic and non-deterministic checks?

Orbital supports deterministic rules and model-based checks. Use explicit patterns, term lists and checksum validation when the rule is precise; use learned recognition or Reflex when meaning and policy context matter. Model-based does not necessarily mean random: inference can be repeatable, but a learned verdict still needs evaluation. Configure the supported checks for your task; this is not a promise of automatic escalation whenever a model is uncertain.

Why can Orbital cost less to run?

Orbital runs Aona’s own model inference instead of requiring a paid general-purpose AI API call for every Orbital check. Deterministic checks need no model inference; focused models handle recognition and policy context. This architecture is designed to reduce inference spend. Actual savings depend on the workload and deployment; compute, hosting and Aona service costs still apply. Deterministic-only operation avoids model inference, and selecting supported checks lets you avoid unnecessary model work. Compare total costs, including infrastructure and service costs, on representative request volumes; there is no universal savings percentage.

How does Orbital help prevent sensitive data from reaching AI tools?

Orbital can identify sensitive data and evaluate requests against configured policies. On a supported Aona client path, those findings can inform redaction or blocking. For an API integration, your application must apply the returned verdict. A model check alone does not intercept every AI request.

Can we use our own business policies?

Yes. Aona supports customer-authored policy guardrails with policy instructions and labelled examples, answered by Reflex, plus Radar patterns and term lists. This configures the check; it is not per-customer model retraining. Use separate test requests to evaluate allowed and disallowed behaviour before activation, and confirm support in your deployment.

Does Orbital Edge mean our data never leaves the device?

For the check itself, yes. With Orbital Edge, Radar, Lens, Reflex and Vision run in a local agent on the employee’s machine, so the prompt is checked where it is typed and is not sent anywhere to be evaluated. Sensitive data is redacted or the request is blocked before it leaves the device. An allowed request then goes to the AI tool the employee chose, under your policy; confirm logging and telemetry settings for your deployment.

What changes between Orbital Edge and Orbital Cloud?

Where the check runs. Both run the same Radar, Lens, Reflex and Vision Submodels: Orbital Edge uses the employee’s machine, Orbital Cloud uses server infrastructure such as a T4 GPU. Model selection does not imply feature parity across clients or deployments.

Can we run Orbital in our cloud or on-premises?

Aona offers separate choices for backend hosting and prompt processing. The backend can run in your cloud, on-premises or on Aona-managed servers. Prompt processing can run on the user device, in your environment or on Aona-managed servers. Confirm the supported Orbital Model, feature and integration configuration for your deployment.

Can Orbital evaluate document content as well as prompts?

Orbital Files prepares text from supported documents and OCR paths for configured guardrails. It is a separate processing pipeline, not an Orbital Model. Vision inspects original pixels for signature-shaped regions and remains staging-only, not generally available. Neither signature detection nor a policy verdict proves identity, consent or compliance. Confirm file formats, original-byte access and the processing path.

Which languages should we evaluate?

The documented release-quality language scope is English, French and Spanish. In Aona’s held-out tests Orbital 2.2.9 scored 99.1% accuracy across 2,802 English, French and Spanish rows, caught 98.8% of non-English attacks, and found names, places and dates across 12 languages at F1 0.936. Other languages are best effort and need use-case-specific evaluation. Test real language patterns, document types and policy examples from your organisation; release-quality scope is not a guarantee of perfect results.

Does use-case classification change a security decision?

No. Orbital’s use-case analytics describes the activity behind a request, such as research or email. It is separate from the configured guardrail verdict. The documented API integration is flag-gated staging, not generally available; confirm its availability for your deployment.

SEE AONA’S TECHNOLOGY ON YOUR WORK

Your security requirements. Orbital underneath.

Bring your policies, representative requests and preferred infrastructure. See which checks fit, then evaluate accuracy and operating requirements for your rollout.