# Orum

> Orum is an AI-powered parallel dialing and sales-calling platform — a Dialer, a virtual
> Salesfloor, a Coaching and Enablement suite, Orum AI, and Scout AI data agents. It is
> orum.com, and it is NOT orum.io, an unrelated payments-infrastructure company with a
> near-identical name. Orum publishes no request API: there is no OpenAPI, no API reference,
> no SDK, no CLI, no MCP server and no developer portal, and api./docs./developers.orum.com do
> not resolve. The ONE machine-facing contract Orum ships is an outbound webhook, sold as a
> paid add-on and documented in the public help center.

Generated by API Evangelist from public sources on 2026-08-13. Orum serves no /llms.txt of its
own (https://www.orum.com/llms.txt returns 404), so this is our summary of Orum's public
surface, not a document Orum published.

## The one integration contract

- [Webhooks reference](https://support.orum.com/en-US/orum/article/ART-463-webhooks): outbound
  only. One event, `call-disposition-added`. Envelope `{event, payload, test}`. Signed with
  HMAC-SHA256 (base64) in an `x-webhook-signature: t={timestamp},s={sig}` header over
  `{timestamp}.{body}`, using a signing key the customer types in. Expects a 2xx within ~15
  seconds; retries up to 8 times over 30 minutes with exponential backoff and jitter. No
  historical replay. Egress IPs 3.138.92.104, 18.116.161.231, 3.19.195.170.
- [Webhooks launch post](https://www.orum.com/blog/introducing-orum-webhooks-real-time-sales-data-for-any-crm-or-workflow):
  announced 2025-04-14. This post is the only place the reference is linked from.
- No AsyncAPI, no JSON Schema, no example payload. Payload fields are a prose bullet list, and
  CSV-uploaded list columns are appended per tenant, so the shape is not fully knowable from
  outside.
- Webhooks can only be created, tested, listed and deleted in the Orum UI. There is no
  management API.

## Authentication

- [Single Sign-On](https://support.orum.com/en-US/orum/article/Am0DBxe--singlesignon-sso):
  human sign-in via Auth0, supporting SAML, OpenID Connect and OAuth 2.0 with Okta, Azure AD,
  Google Workspace and others. Self-service IdP configuration links, DNS domain verification.
- No API keys, no tokens, no OAuth client registration — there is nothing to authenticate to.

## Docs and support

- [Help Center](https://support.orum.com/en-US/orum) — eight directories: Getting Started,
  Features, Integrations, Best Practices, Troubleshooting & FAQ, Teams & Users, Settings,
  Security and Compliance. The webhooks article is NOT listed in any of them.
- [Networking and whitelisting](https://support.orum.com/en-US/orum/article/S5hQ0SdQ-networking-recommendations-and-whitelisting):
  WebRTC with Cloudflare STUN/TURN, RTP over UDP to Orum's SIP server; Vonage Video API for
  Salesfloor; DevRev.ai for the embedded support widget.
- [Chrome extension](https://support.orum.com/en-US/orum/article/apiCNAs9-chrome-extension) —
  [Chrome Web Store](https://chromewebstore.google.com/detail/orum/mgldaplfkpdgnojhbmllomokgeabokdd),
  v0.1.1, updated 2026-02-25. Embeds a prospect's LinkedIn profile in the connect screen.

## Platform

- [Product](https://www.orum.com/) — [Dialer](https://www.orum.com/platform/dialer),
  [Salesfloor](https://www.orum.com/platform/salesfloor),
  [Coaching](https://www.orum.com/platform/coaching-and-enablement),
  [Orum AI](https://www.orum.com/platform/orum-ai), [Scout](https://www.orum.com/platform/scout)
- [Integrations](https://www.orum.com/platform/integrations): Salesforce, HubSpot, Outreach,
  Salesloft, Gong Engage, Apollo — plus Webhooks for everything else.
- [International calling](https://www.orum.com/international-calling): US & Canada plus 160+
  countries and regions (Ascend tier).
- [Product updates](https://www.orum.com/product-updates): 20 dated entries, 2026-01 to
  2026-06. No RSS/Atom/JSON feed; the index is client-side rendered.

## Pricing

- [Pricing](https://www.orum.com/pricing): two tiers, Launch and Ascend, both 3-seat minimum
  and both "Request pricing" — no figure is published. Add-ons: Webhooks, AI Coaching, Ascend
  Limited. Free trial capped at 500 dials; paid plans are uncapped.

## Security, trust and status

- [Trust portal](https://trust.orum.com/): SOC 2 Type 2, ISO 27001:2022, ISO 27017:2015,
  ISO 27018:2019, ISO 27701:2019, GDPR Ready, US Data Protection Ready, Data Privacy Framework.
- [Security & compliance](https://www.orum.com/platform/security)
- [Responsible Disclosure Policy](https://www.orum.com/responsible_disclosure): report to
  security@orum.com. Discretionary reward, no safe harbour, exclusions for DDoS, spamming,
  social engineering and physical attacks.
- [Status](https://status.orum.com) — Atlassian Statuspage. Machine-readable at
  `/api/v2/summary.json`. Components: Dialer, Salesfloor, Analytics, Coaching suite, plus the
  Vonage Voice API and HubSpot API dependencies Orum tracks as its own.
- No `/.well-known/security.txt` on any Orum-controlled host.

## Legal

- [Terms](https://www.orum.com/terms) · [Privacy](https://www.orum.com/privacy) ·
  [DPA](https://www.orum.com/data_processing_addendum) ·
  [Technical and organizational measures](https://www.orum.com/platform/security/technical-and-organizational-measures)

## Code

- [github.com/orumhq](https://github.com/orumhq) — 4 public repos, three of them forks of
  third-party VoIP tooling (SIP.js, hepipe.js) plus purview. No SDK, no CLI, no spec.

## What does not exist

No OpenAPI. No AsyncAPI. No GraphQL. No MCP server. No A2A agent card. No `/llms.txt`. No
`/.well-known/api-catalog`. No SDKs in any language. No CLI. No sandbox or test environment.
No published rate limits. No versioning or deprecation policy. No SLA. Every one of these was
probed on 2026-08-13 and recorded in this repository with its HTTP status.