Atmos ProAtmos Pro
Trust Center
Contact security

Atmos Pro

Atmos Pro is a hosted platform for managing Terraform and OpenTofu infrastructure with drift detection, deployment provenance, change governance, and audit logging. This portal contains our security and compliance documentation.

security@cloudposse.comPrivacy Policy

Purchasing Atmos Pro? Visit Procurement for vendor details, agreements, and payment options.

OverviewResourcesControlsSubprocessorsFAQUpdates

Controls

Infrastructure securityOrganizational securityProduct securityInternal security proceduresData and privacy

Data and privacy

How customer data is classified, isolated, retained, and deleted.

PlannedIn progressPolicy establishedImplementedAudited
ControlStatus
Workspace data isolation
Customer data is scoped to its workspace; access is authorized per workspace on every request.
Support access to customer workspaces
Cloud Posse support access to a customer workspace is strictly read-only and gated by a customer-controlled toggle that is off by default. There is no mechanism for Cloud Posse to obtain write access to a customer workspace through this feature.
Data retention procedures established
Audit log retention is enforced by an automated, plan-tier-based purge. Other customer data is retained until deleted by the customer or removed on request.
Data Classification and Handling PolicyLogging, Monitoring and Retention Standard
Customer data deleted on request
On request, customer data is deleted in line with the published retention policy, except records retained for security and audit-trail purposes.
Published subprocessor list
All subprocessors with access to customer data are disclosed and kept current.
Data minimization
Only the data needed to provide the service is collected; sensitive categories are avoided.
GDPR-aligned data handling
Privacy practices follow GDPR principles, including data minimization and a Privacy Policy.
Data classification policy established
A data classification policy that sets how confidential data is protected is approved and published.
Data Classification and Handling Policy