Security at Atlas BOS

These are controls built into the Atlas product. They are product controls, not third-party certifications or audits.

• Role-based access

  Workspace members are assigned roles, and permissions limit what each person can see and change.

• Human approval before AI actions run

  Atlas drafts and recommends. Consequential actions wait for a person to review and approve them.

• Optional two-factor sign-in

  Users can turn on authenticator-app (TOTP) two-factor verification for their account.

• Workspace data isolation

  Data is stored in a Postgres database hosted on Supabase, with row-level security policies that scope records to each organization.

• Encrypted in transit

  The app is served over HTTPS, so traffic between your browser and Atlas is encrypted.

• Activity records

  Sign-in events and significant actions are recorded so workspace admins can review them.

Have a security question or need more detail for a review?