Atmos Pro
Atmos Pro is a hosted platform for managing Terraform and OpenTofu infrastructure with drift detection, deployment provenance, change governance, and audit logging. This portal contains our security and compliance documentation.
Purchasing Atmos Pro? Visit Procurement for vendor details, agreements, and payment options.
Product
What Atmos Pro is, who it's for, and how it fits into your infrastructure workflow.
What enterprise customers get — capabilities, deployment options, and support.
Security
A high-level summary of how Atmos Pro protects your code, credentials, and data.
The technical security model — trust boundaries, GitHub App, OIDC/STS, webhooks, encryption, and audit logging.
A visual map of trust boundaries and data flows across the browser, Atmos Pro, GitHub, Sentry, and your own cloud.
Information Security Policy — Cloud Posse security program.
Access Control Policy — Cloud Posse security program.
Incident Response Plan — Cloud Posse security program.
Business Continuity and Disaster Recovery Plan — Cloud Posse security program.
Data Classification and Handling Policy — Cloud Posse security program.
Vulnerability and Patch Management Policy — Cloud Posse security program.
Secure Development and Change Management Policy — Cloud Posse security program.
Acceptable Use Policy — Cloud Posse security program.
Personnel Security Policy — Cloud Posse security program.
Physical Security Policy — Cloud Posse security program.
Password and Authentication Standard — Cloud Posse security program.
System Hardening and Configuration Standard — Cloud Posse security program.
Encryption Standard — Cloud Posse security program.
Logging, Monitoring and Retention Standard — Cloud Posse security program.
Legal
The master subscription agreement governing your use of Atmos Pro. Also published at atmos-pro.com/legal/saas-agreement.
Compliance
Where we are on SOC 2, what's already in place, and what's next.
How we classify and protect each category of data Atmos Pro processes — by sensitivity, not by database table.
Risk Management Policy — Cloud Posse security program.
Vendor Management Policy — Cloud Posse security program.
Security Awareness Training Policy — Cloud Posse security program.
Security Roles and Responsibilities — Cloud Posse security program.
Risk Register — Cloud Posse security program.