Atmos ProAtmos Pro
Trust Center
Contact security

Atmos Pro

Atmos Pro is a hosted platform for managing Terraform and OpenTofu infrastructure with drift detection, deployment provenance, change governance, and audit logging. This portal contains our security and compliance documentation.

security@cloudposse.comPrivacy Policy

Purchasing Atmos Pro? Visit Procurement for vendor details, agreements, and payment options.

OverviewResourcesControlsSubprocessorsFAQUpdates

Changes to our security posture, controls, and documents.

RSSAtom

  1. Enabled merge-blocking SAST, SCA, and secrets-scanning gate

    Aug 11, 2026

    Semgrep (SAST), Trivy (SCA), Gitleaks, and Chainguard Malcontent Critical/High findings, or any detected secret, now block merges to main via required status checks.

  2. Refreshed offboarding checklist and data-retention control language

    Aug 11, 2026

    Our offboarding checklist exists but had gone stale from infrequent use, so we described it as out of date and being refreshed rather than as a fully current, actively maintained process. Also scoped the data-retention control description to what's actually automated today.

  3. Added support access, personnel confidentiality, and DPA disclosures

    Aug 11, 2026

    Published new controls and FAQ entries covering the read-only customer-gated support access model, personnel confidentiality agreements, and DPA availability.

  4. Published Data Flow & Trust Boundaries diagram

    Aug 7, 2026

    Added an interactive trust-boundary diagram and a numbered data-flow table to Resources, mapping how data moves between your browser, Atmos Pro, GitHub, and your own cloud.

  5. Trust Center gated to Business/Enterprise plans

    Jul 8, 2026

    Simplified the access-request workflow for gated Trust Center documents.

  6. Trust Center launched

    Jun 25, 2026

    Published the Atmos Pro Trust Center with security and compliance documentation, control checklists across five areas (infrastructure, organizational, product, internal procedures, and data & privacy), a procurement FAQ, and a document request-access workflow.

  7. Published Security Whitepaper

    Jun 25, 2026

    Published the Atmos Pro Security Architecture Whitepaper covering trust boundaries, the GitHub-only integration model, webhook security, encryption, audit logging, and data retention.

  8. GitHub Enterprise Managed Users (EMU) support

    May 15, 2026

    Added support for GitHub Enterprise Managed Users (EMU) organizations, so customers on GitHub EMU can install and use Atmos Pro.