Trust Center
One place for security reviewers, procurement teams and buyers to check how OrenGen handles security, data and AI, and which credentials we hold. Each page states plainly what we hold and what we don't.
How we publish
Every credential, registration, figure and date in the Trust Center is checked against an OrenGen record before it is published. If we can't find the record, the item stays off the page.
Frameworks are described as “aligned with” or “designed to support” unless we hold a certificate, and what we don't hold is stated as plainly as what we do.
What we don't hold. OrenGen does not currently hold CMMC, FedRAMP, DoD Impact Level, CJIS or HITRUST authorizations, is not a 21 CFR Part 11-validated system, and does not maintain corporate personnel security clearances.
“Radical Operational Truth” is one of our five core values. This is where it gets tested.
In the Trust Center
Start with whichever question your review asks first.
The security facts reviewers ask for first, how responsibility splits by deployment model, and how to report a vulnerability.
Security →Where data is stored and processed in cloud, self-hosted and hybrid systems, and how that lines up with our Privacy Policy.
Privacy & Data Handling →How OrenGen governs its own use of AI: human approval, consent before contact, AI disclosure and evaluation.
Responsible AI →The accessibility standard this site is built toward, WCAG 2.2 AA, and how to report a barrier.
Accessibility →Where we stand on each framework buyers ask about: certified, not held or not claimed.
Compliance →Our identifiers, certificates and accreditations, each with its status, source record and evidence.
Credentials & Registrations →The service providers that process data on OrenGen's behalf, grouped by what each one does.
Subprocessors →Our Privacy Policy, Terms of Service, Acceptable Use Policy and the other policies these pages refer to.
Legal →At a glance
Four facts a vendor review usually asks for first, each checked against OrenGen's company records. The full list, with evidence, is on Credentials & Registrations.
Entity
OrenGen Worldwide LLC is a Texas limited liability company.
Ownership
Minority-owned small business.
Accreditation
BBB Accredited Business.
Supplier certification
SupplierGateway Supplier Impact Certification (US), Certificate No. SG06265178661562, valid June 1, 2026 – June 1, 2027. Verify at suppliergateway.com/verifycert.
Vendor review
Send security questionnaires, procurement forms and data-handling requirements through Contact Sales. Tell us which framework your review follows and when you need answers, and we'll tell you plainly which questions we can answer with evidence.
Our founder, Andre Mandel, personally leads sales, solution architecture and client delivery.
Looking for governance built into your own systems rather than a review of ours? See Governance & Security and Regulated Organizations.
Trust Center
In a Mission Brief we work through where your system should run, which data it touches and where a person must approve, so the answers exist before the questionnaire arrives.