Security
Clear answers for IT and HR
Understand how Okra keeps each organisation’s data apart, checks its code and controls who can see what. Explore what it holds about people, and what it never stores.
For your IT team
- Can another organisation reach our data?
- Each organisation's data is kept apart: every request is tied to its own organisation, and a request without one is refused. Before every release, tests sign in as one organisation and try to reach another's data; a release that fails them does not ship.
- How is Okra's code checked?
- Every change runs the full test suite before it can be released: unit tests, tests against a real database, and the tests that try to cross from one organisation to another. Dependencies are checked for known serious vulnerabilities, and a release that fails does not ship. The code is also scanned for leaked secrets and known weaknesses on every change and every week.
- Who changed what, and when?
- Every change to objectives, key results, check-ins, approvals, visibility, roles and settings is recorded: who, what and when. A change the assistant proposed is recorded with the person who confirmed it. The record cannot be edited.
- How do people sign in?
- With their Microsoft work account. Microsoft can be made the only way in, with one emergency administrator account whose every use is recorded. An open browser tab signs out after the organisation's idle time, and every session ends after a set number of hours.
- What can the AI see and do?
- Only what the person asking can see, with their permissions. Nothing it proposes is saved until that person confirms it. It can be switched off for the whole organisation or for some roles.
- Who can do what?
- Each person's role decides what they can do, and each objective's visibility decides who can read it. A record someone may not read is answered as if it did not exist.
- Can we take our data with us?
- Yes. An administrator can export objectives and check-ins in CSV, a full copy of the organisation's data in CSV with its settings in JSON, the audit log in CSV or JSON, and cycle reports in PDF or Excel, whenever they want.
For your HR team
Measure goals. Never people.
- What does Okra hold about a person?
- Directory details such as name, job title, department and manager, next to their objectives and check-ins. There is nowhere to store a rating, a ranking or pay.
- Who can see a person's objectives?
- Each objective has its own visibility: private, team, department, leadership only or organisation. A private objective is hidden from colleagues. It is seen by its owner and co-owners, anyone who owns one of its key results, the owner's line of management, the heads of its unit and of the units above, people with an executive role (including in a parent company linked to yours), the people who run the OKR programme, and auditors within their scope; an administrator's full data export includes it too. Company objectives are always visible to everyone. Where someone may not see an objective, the tree shows only a count, never what it says.
- Do individual objectives count in team scores?
- No. An objective's score comes only from its own key results; it never includes the objectives linked under it.
- Does the assistant judge people?
- It is built to refuse to rate or rank people, or to write performance-review content. People with an executive role can ask whose key results are behind, and get a list, never a ranking.
Let’s talk about your organisation.
Bring your questions. We’ll answer them and send a quote for your organisation.
Talk to us
Or write to contact@okra.mu
What happens next
You write to us
Share roughly how many people would use Okra, and ask anything you need to know.
A quote for your organisation
Your quote depends mainly on employee numbers, the AI use you need and hosting.
We set Okra up with you
During onboarding, we enable Microsoft sign-in and your directory of people, managers and departments for your organisation.
Free migration
Share your current objectives from a spreadsheet, slide deck or another OKR tool. We set them up in Okra with you, at no charge.