Trust center
Security that’s built in, not bolted on
Your areas of interest, imagery and results can be commercially and operationally sensitive. We protect them with enterprise-grade controls at every layer.
- SOC 2 Type IIAudited annually
- ISO/IEC 27001Certified
- GDPRCompliant · DPA available
- CCPACompliant
Platform security
Defense in depth
Security controls across infrastructure, application and organization.
Encryption
TLS 1.3 for data in transit and AES-256 for data at rest, with keys managed in a hardware-backed KMS. Customer-managed keys available on Enterprise.
Access control
SSO via SAML 2.0 and OIDC, SCIM provisioning, enforced MFA and fine-grained, project-level roles.
Audit logging
Immutable logs of every sign-in, API call, export and permission change, exportable to your SIEM.
Flexible deployment
Multi-tenant cloud, single-tenant, private VPC in your cloud account, or fully air-gapped on-premises.
Data residency
Choose where imagery, results and metadata are stored and processed: United States, European Union or India.
Responsible AI
Published model cards, evaluation across regions, and policies that prohibit surveillance of individuals.
Operations
Secure by practice
Strong controls only matter if they’re followed every day. Here’s how we operate.
- Annual third-party penetration tests and continuous vulnerability scanning
- Background checks and security training for every employee
- Least-privilege production access with just-in-time approval
- Your data is never used to train shared models without opt-in
Responsible disclosure
If you believe you’ve found a security issue, please email security@atlaso.co.in. We acknowledge reports within one business day and will keep you updated until it’s resolved. We don’t pursue legal action against good-faith research.
Need our security package?
Request our SOC 2 report, penetration test summary, DPA and completed security questionnaires.