Security & privacy

Your work stays yours.

Atlas reads your inbox, code and team channels, so how it handles data matters as much as what it can do. Here is how it works, in plain language.

Nothing happens without you

Every email, post, invite, issue, page or file change is shown exactly as it will happen and waits for your approval. Read and write access are separate switches for each app.

Never used for training

Your conversations and the data from your connected accounts are never used to train AI models, ours or anyone else’s. Atlas chooses engine terms that do not allow training on what it sends. The one exception, a free engine tier whose provider may use requests, never receives attachments, photos, memories, connected-app or PC data, and never handles Atlas’s background steps.

Fetched on demand, not stored

Atlas reads from a connected app only when your request needs it. It keeps no copy of what it read beyond the answer in your conversation, plus a record of which app or item was read. Slack messages are never stored.

Private data does not leak out

Once a conversation holds your files or app data, any search or page Atlas chose itself waits for your approval, so private details cannot leave in a search query or link. Content Atlas reads is treated as information, never as instructions.

Security in the product.

  • Encrypted connections. Access tokens and API keys are encrypted at rest (AES-256-GCM) and never shown to AI models.
  • Accounts. Passwords are stored only as salted Argon2id hashes. Sessions use HTTPS-only, httpOnly cookies with hashed session tokens.
  • Network safety. The page reader blocks private networks, and outside content is wrapped and flagged so planted instructions are ignored.
  • Logs without your words. Logs and request traces record steps and timings, never what you or Atlas wrote. Diagnostics are kept for 14 days.
  • Abuse limits. Sign-in, sign-up and resets are rate-limited across every server.

Your controls.

  • Export. Download your profile, conversations, memories, settings and usage as JSON.
  • Delete. Delete a conversation, all history, memories, or your whole account. Deleting your account also deletes your connection tokens and activity log.
  • Disconnect. Removing an app deletes its token, and revokes it where the service supports that.
  • Memory. Approve each memory, switch memory off, or remove what Atlas remembers.

This page summarizes how the Atlas AI app handles data. The full Atlas AI Privacy Policy is shown in the app before you sign up. This website is covered by the Website Privacy Notice. AI can make mistakes, including in summaries of your email, messages and documents; review them before you act on them.

Put Atlas to work.

Atlas AI is in invite-only early access on the web and Windows.