Security and privacy in Atlas
Last updated October 12, 2026
Overview
Atlas protects your team's accounts and your customers' data with security built into the platform and settings you control. This article summarizes both and links to the setup guides and legal documents.
How Atlas protects your data
- Encryption: Sensitive data is encrypted in transit (TLS/SSL) and at rest.
- Restricted access: Atlas staff access to data is limited with role-based permissions. Multi-factor authentication is required for administrative access, and access to sensitive data is logged and monitored.
- Data location: Data is stored with reputable cloud providers and processed in the United States.
- Payment data: Atlas doesn't store your payment card details. Payments are handled by PCI-DSS compliant processors.
- Privacy rights: Atlas supports privacy requests under GDPR and CCPA, such as access and deletion.
Security settings you control
| Setting | What it protects | Where to set it |
| Two-factor authentication | Requires a second sign-in step for every teammate. | "Settings > Security" |
| Roles and permissions | Limits what each teammate can see and change: Admin, Agent or Viewer. | "Settings > Team" |
| Customer authentication | Verifies each customer's identity with a signed user hash, so no one can pose as them in chat. | "App Configuration > Getting Started > Authentication" |
| Session recording privacy | Masks personal and payment fields in recordings. Password fields are always hidden. | "App Configuration > Session Recording" |
| API keys | Each key is shown only once when you create it. Delete keys you no longer use. | "App Configuration > Data > API & webhooks" |
| Webhook secret key | Lets your server confirm that each request comes from Atlas. | "App Configuration > Data > API & webhooks" |
Legal documents
- Terms of Service : The terms that govern your use of Atlas.
- Privacy Policy : What data Atlas collects, how it's used and your privacy rights.
- Data Processing Agreement (DPA) : How Atlas processes personal data on your behalf, under GDPR.
FAQs & Troubleshooting
Where is my data stored?
With reputable cloud providers. It's processed in the United States. For details, see the Privacy Policy .
Who at Atlas can see my customers' session recordings?
Access is limited to a minimal set of authorized Atlas staff.
How do I get the DPA or report a security concern?
Download the DPA from the Legal page . For security concerns, contact support@atlas.so .
Was this article helpful?