What does Oredra do?
Oredra helps small businesses build a reusable security profile, create policies from approved information, identify gaps, and draft customer security questionnaire answers.
Frequently asked questions
Clear answers about Oredra.
How Oredra handles security documentation, questionnaire drafting, policies, evidence, and unsupported claims.
Does Oredra make a company SOC 2 compliant?
SOC 2 is an audit and report, not a certification status. Oredra does not conduct a SOC 2 audit or issue a SOC 2 report. It records what the company can support and flags what still needs verification.
Do I need existing security policies?
No. You can upload what you already have or start with guided questions. Oredra creates only the documents supported by your approved answers.
Can Oredra answer every questionnaire question?
No. When the approved company profile and available documents do not support an accurate answer, Oredra flags the question instead of guessing.
Who is Oredra designed for?
Oredra is designed for small businesses that regularly receive customer security questionnaires but do not need or cannot justify a full managed compliance platform.
Does every pricing plan include the full platform?
Yes. Every plan includes the complete Oredra platform. Plans differ only by active headcount and questionnaire analyses used during your 12-month allowance period. Active pricing headcount includes employees, contractors, Owners, and Administrators. Each person counts once. Oredra uses the higher of your company-declared active count or your observed active Oredra roster so an incomplete roster never understates pricing. The questionnaire allowance resets on your account anniversary, not January 1.
Can I pay annually?
No. Oredra is monthly only: Starter is $249/month, Business is $399/month, and Business Plus is $899/month. There is no annual-payment option or annual prepayment discount.
How does the referral program work?
The 2026 launch referral offer ends midnight CST at the end of December 31, 2026. During the promotion, refer as many genuinely new businesses as you want. A referred business must join through your link before the cutoff and complete its qualifying first payment within 30 days. The referrer must also have an active paid Oredra subscription in good standing with a successfully paid Stripe invoice. Once Stripe confirms those requirements, Oredra applies a customer credit to each eligible Starter, Business, or Business Plus workspace equal to one month at that workspace's current published plan price. Custom-plan referral rewards require manual review.
What is the difference between a policy and a control?
A policy is a written rule or expectation. A control is a safeguard that is actually implemented. Oredra keeps those statuses separate and does not treat a policy as proof that a control operates.
Will Oredra invent evidence or security practices?
No. Oredra does not invent tools, training, testing, backups, scans, reviews, certifications, or other security activities. Unsupported items remain unknown or are assigned for follow-up.