Security at Atlas

Atlas by Equipoise · Last updated 5 October 2026 · Contact: support@equipoise.earth

Atlas holds sustainability data for many organisations, so isolation between organisations is the foundation of our security model — enforced in the infrastructure, not just in application code. These are the concrete controls we run today.

Organisation isolation

  • Every organisation’s data is fenced by row-level security inside the database itself: the database refuses to return another organisation’s rows even if application code were to omit a filter.
  • The application connects with a restricted database role that has no access to sensitive tables beyond its per-organisation fence; administrative operations use a separate credential.
  • Automated tests verify on every code change that every table the application can reach is fenced, in both directions, and that isolation survives connection reuse.

Release controls

  • No change reaches production without passing an automated gate: type checks, linting, over a hundred database and isolation tests, and browser tests that use the product the way a person does. The gate is enforced by branch protection — it cannot be skipped.
  • Changes are reviewed adversarially before merge, with security-relevant behaviour re-verified each round.

Data protection

  • Data is encrypted in transit (TLS) and at rest.
  • Application and database hosting run in EU regions (Frankfurt); see our sub-processor list for every third party and its region.
  • AI features run under commercial API terms — customer data is not used to train models.
  • Point-in-time database recovery and weekly file-storage backups, with restore instructions maintained off-platform.

Access control

  • Administrative access requires two-step verification, is limited to named staff, and is logged in an audit trail.
  • Platform access is invitation-based; account authentication is handled by a dedicated provider (Clerk) — we never store passwords ourselves.

Reporting a concern

If you believe you have found a security issue, contact support@equipoise.earth and we will respond promptly. Please do not test against other organisations’ data.