Atmos ProAtmos Pro
Trust Center
Contact security

Atmos Pro

Atmos Pro is a hosted platform for managing Terraform and OpenTofu infrastructure with drift detection, deployment provenance, change governance, and audit logging. This portal contains our security and compliance documentation.

security@cloudposse.comPrivacy Policy

Purchasing Atmos Pro? Visit Procurement for vendor details, agreements, and payment options.

OverviewResourcesControlsSubprocessorsFAQUpdates

Subprocessors

Cloud Posse engages the following subprocessors to assist in providing the Atmos Pro service. This list is updated as our infrastructure evolves. See Section 14.3 of the SaaS Agreement for notice-of-change terms.

Current Subprocessors

SubprocessorPurposeData Location
Vercel, Inc.Application hosting, edge network, blob storage, and AI GatewayUnited States for hosting and storage; AI inference varies by provider and routing
Neon, Inc.Managed PostgreSQL databaseUnited States
GitHub, Inc.OAuth authentication, GitHub App webhooks, and repository integrationUnited States
Stripe, Inc.Payment processing and subscription management (for customers paying via Stripe)United States
ResendTransactional email deliveryUnited States
Inngest, Inc.Background job orchestrationUnited States
Linear Orbit, Inc.Customer support ticket management, including tickets created from Slack ConnectUnited States
Slack Technologies, LLCCustomer support conversations in shared Slack Connect channelsUnited States
Sentry (Functional Software, Inc.)Error tracking and performance monitoringUnited States
Honeycomb (Hound Technology, Inc.)Distributed tracing and observability (OpenTelemetry backend)United States
PostHog, Inc.Product analyticsUnited States / customer-configurable
Upstash, Inc.Rate limiting and replay protection for sign-in and GitHub OIDC tokensUnited States
OpenAI OpCo, LLCSpeech-to-text for voice input in Atmos Pro chatUnited States
Automattic Inc. (Gravatar)Profile images; the browser sends a hash of the user's email addressUnited States

Customer-authorized integrations

When a customer installs the Atmos Pro Slack app, Atmos Pro sends notifications to the customer's Slack workspace and reads the messages and files in threads where a user mentions Atmos Pro. Slack Technologies, LLC processes this data under the customer's own agreement with Slack. The integration is optional and the customer can remove it at any time.

AI processing through Vercel AI Gateway

Atmos Pro uses Vercel AI Gateway for AI chat and infrastructure summaries. Requests are sent to Vercel, which routes them to an inference provider supporting the selected model. Configured models include Anthropic Claude, OpenAI GPT, and Google Gemini; the inference provider may differ from the model developer depending on gateway routing.

Workspace owners and admins can turn off AI features for a workspace under Settings → AI.

AI requests can include conversation messages, attachments, and infrastructure context retrieved by authorized tools to answer the user's request. The selected inference provider processes this context to generate a response. Model access for chat and summaries is through Vercel AI Gateway; the model names above identify the available model families rather than separate direct API integrations. Speech-to-text for voice input is the one exception: Atmos Pro sends the audio directly to OpenAI, which is listed above.

Atmos Pro's primary application storage is in the United States. AI inference locations and provider retention depend on the applicable gateway configuration, routing, and provider terms. The application's storage region does not guarantee that all AI processing occurs in that region. See Vercel's AI Product Terms, AI Gateway providers, and Vercel's subprocessor disclosures.

AWS Marketplace

Customers who purchase through AWS Marketplace have their billing relationship administered by Amazon Web Services, Inc. under AWS Marketplace terms.

Contact

For questions or objections regarding our subprocessors, please contact legal@cloudposse.com. Customers subject to the SaaS Agreement have a 30-day objection window for new subprocessors under Section 14.3.


Last updated: October 28, 2026