Security
Powerful enough to act. Designed so you stay in control.
An assistant that can see your calendar, email, messages, location, home and car raises an obvious question. Atlas is built to answer it before you ask.
"You're giving this thing access to everything."
Correct — and that's exactly why control and traceability are part of the product, not an afterthought. Breadth is only an asset if you stay in charge of it.
The principles
Four commitments Atlas is built around.
You control what Atlas can see.
You control what Atlas can do.
Important actions require approval.
Every action can be traced.
The architecture
How that's enforced.
Single authorized owner
Each installation serves exactly one owner. Atlas acts only on their behalf — there's no shared, multi-user surface over one person's data.
Server-side & encrypted
Account tokens and secrets are stored encrypted, kept server-side, and never exposed in the interface or to the model.
Human in the loop
Anything that changes the real world — a message, a booking, a device — pauses for your explicit approval before it runs.
Untrusted content, contained
Content from emails, web pages and messages is treated as data, not instructions — so a message can't quietly redirect Atlas to act against you.
Guarded outbound fetches
Requests Atlas makes on your behalf are constrained to prevent them from being pointed at internal or unintended targets.
Signature verification
Inbound webhooks and events are verified before they're trusted, so external systems can't spoof activity into your Atlas.
Secrets isolation & rate limits
Secrets are compartmentalized and requests are rate-limited, reducing blast radius if any single surface is stressed.
Traceable activity
What Atlas did, when, and why is recorded — so you can review every action after the fact.
Revoke access anytime
Disconnect any service in a click. Atlas stops accessing it and drops the associated credentials.
Addressing the objection makes the breadth of Atlas feel more impressive, not less. An assistant you can trust with your whole world is a different category from a chatbot you keep at arm's length.