One platform. Four layers.
Every app shares it.
Orbit isn't a bundle of apps — it's a unified platform. The same AI engine, the same integration backbone, the same JWT-scoped security powers BPI, MFT, AI-OCR, and Vault. Build once, govern once.
Architecture
A layered platform, by design.
Four horizontal layers. Each one earns the layer above it. AI shouldn't be glued on top — it should run through every flow, every parse, every mapping. So that's how Orbit is built.
Applications
Four independent apps that run on the same Orbit backbone — subscribe to one or combine into a full suite.
AI Engine
Real, named AI surfaces that ship inside the platform — not a buzzword roster.
Integration
Every format we parse, every protocol we speak, every flow we run — same engine.
Security & Identity
JWT-scoped, tenant-isolated, RBAC-governed, audit-logged — from day one.
AI surfaces
Real AI. Named. Shipped.
Other platforms list "AI-powered" as a bullet. Orbit ships six specific AI surfaces that have names, jobs, and real impact in production today — built on the Vercel AI SDK with Claude / GPT-4 / Gemini, depending on the workload.
MAPR AI alone replaces an entire integration consultant — a claim none of our competitors will make about their AI.
MAPR AI
Hand it two sample payloads. It parses both schemas, proposes a complete rule set, dry-runs it, repairs failures, and applies a live mapping in your IDE. 80 hours of work in 8 minutes.
JSONata Assistant
Describe the transformation in English. The assistant returns valid JSONata you can paste into a rule — fallbacks, qualifiers, conditionals, all of it.
AI-OCR Engine
Upload a document, chat to refine the extraction schema, save it as a message type. Runs at flow time so production PDFs become structured data with the same shape every run.
Doc Insights
Renders raw X12 / EDIFACT / IDoc as a clean, business-readable card stack. Buyers, finance, ops can read a transaction without reading EDI.
Dashboard Agent
Every BPI dashboard surface has an Orbit-grounded assistant: "how many failed transactions today", "recent executions for ACME", "connection health" — answered against the live tenant data.
Cron Assistant
Describe a schedule ("every weekday at 9am EST"). Get a valid cron expression with timezone. No more cron-tab Googling.
Security model
Multi-tenant from day one.
No "we'll harden it for enterprise" promises. The platform is tenant-scoped at the JWT level, RBAC-governed per-app, and audit-logged on every action. From the first request.
Tenant ID from the JWT, never from a header
Every request's tenant scope comes from a validated JWT claim. Headers can't escalate. The same rule applies to every Java backend (BPI / MFT / TPM) and the Bun runtime.
RBAC per app, with profile-level bundling
Roles bundle permissions. Profiles bundle roles, scoped to specific apps. Users get profiles, never raw permissions. The UI is gated by
Audit log on every action
Every meaningful action — login, role change, mapping activation, share link create, partner edit — lands in an audit_log table with actor, tenant, request ID, and outcome. Exportable, queryable, retained.
Integration backbone
Every format. Every protocol. One backbone.
X12, EDIFACT, IDoc, XML, CSV, JSON for data. AS2, SFTP, FTP/FTPS, OFTP2, REST, JDBC for transport. Plus 200+ pre-built connectors to SAP, Oracle, NetSuite, Salesforce, Shopify, Amazon, and the long tail of trading partners.
Powering enterprise integrations worldwide
