Snapshot 218746
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Skip to content Trust CenterSOC 2 Type 2 · ISO 27001 · HIPAA · GDPR Atatus Trust Center Atatus protects your data, adhering to the highest security, compliance, and privacy standards. 01 / Security program Monitoring starts with trust and security Safeguarding Data with Information Security Program At Atatus, we prioritize security assurance to build confidence in our customers. Our comprehensive Information Security Program (ISP) encompasses all aspects of our operations, from product development to business practices. Our ISP implements robust organizational and technical security measures to maintain a secure environment for our employees, clients, and the data we secure. By adhering to security standards and continuously enhancing our protocols, we ensure the protection and integrity of your valuable data. 02 / Certifications Audited, certified. SOC 2 Type 2 SOC 2 Compliance At Atatus, we undergo SOC 2 Type 2 audits to ensure our platform applies and maintains security controls. This audit evaluates our safeguards' effectiveness, ensuring that your data is protected with excellence. Our SOC 2 Type 2 report, based on the AICPA’s Trust Services Criteria, is available upon request and under a non-disclosure agreement. Adhering to these standards demonstrates our unwavering commitment to data security and operational integrity. Audit Report Available on request ISO 27001:2022 ISO 27001 Certification A certification from the Standards Institution of Israel confirms that Atatus deploys an infrastructure monitoring and observability platform compliant with ISO 27001:2022 standards. It provides assurance to stakeholders that Atatus adheres to rigorous standards in safeguarding information assets against potential risks, ensuring robust organizational and technical security measures. Certificate Issuance Date Sep 16, 2026 Expiration Date Sep 15, 2027 HIPAA Compliant HIPAA Compliance Atatus enables healthcare and life sciences organizations to monitor applications and infrastructure while maintaining compliance with HIPAA standards. We protect electronic protected health information (ePHI) through sensitive data scrubbing, role-based access control, encryption in transit and at rest, audit logging, and signed Business Associate Agreements (BAAs). BAA Status Available on request 03 / Architecture Platform Architecture and Security At Atatus, we pride ourselves on delivering a cloud-native infrastructure monitoring and observability platform that ensures scalability, availability, and security as core principles. Designed to process information strictly within a customer’s cloud environment, our service guarantees that customer data never crosses regional boundaries; all data analysis is performed in the region where the data is initially discovered. By connecting to customer environments through cloud-native APIs, we eliminate the need for agent deployments, enhancing performance and security. Our platform ensures that data is encrypted at all times, both at rest and in transit, using industry-leading encryption standards such as AES-256 and TLS 1.2 or higher. Our architecture is developed by seasoned cybersecurity experts who adhere to rigorous secure software development lifecycle (SSDLC) procedures. To detect and mitigate vulnerabilities, all platform code undergoes peer reviews and stringent security scans, including Static Application Security Testing (SAST) and Software Composition Analysis (SCA). Furthermore, we conduct annual third-party penetration tests and immediate remediation of critical findings. To obtain the SOC 2 and ISO certification reports, or to execute a HIPAA Business Associate Agreement (BAA), please contact our security team at success@atatus.com For more information about our Terms of Service, Privacy Policy, GDPR compliance, and Data Protection Addendum (DPA), please refer to the following pages: Privacy Policy Terms of Service GDPR Data Protection Addendum (DPA)