Trust

Built to be trustworthy from the first event.

AtlasKite runs the same event-sourced architecture as AtlasOPX. Trust isn’t a layer bolted on — it’s the shape of the system.

01 · Architecture

The shape of the system is the security model.

The same event-sourced design that makes the live model possible is what makes it defensible. Nothing happens off the ledger.

01
Event-sourced ledger
The ledger is the authoritative store. Immutable, sequenced, deterministic. Any state reconstructs from the events themselves.
02
Encrypted by design
Encrypted at rest, in transit, and at the eventlog boundary. Sensitive payloads carry sensitivity metadata that gates exposure.
03
No process-local secrets
Secrets don’t sit beside runtime processes. They’re fetched, scoped and short-lived.
04
Every action attributable
Human and AI actions land in the same attributable event log. No invisible mutations.

02 · Responsible AI

AI helps you build and run faster — without becoming a black box. It works on the model, in the open, on the record.

Bounded: AI acts inside the model — on your processes, records and controls — not free-form against your data.
Reviewable: AI proposes; a person can review before it takes effect. You decide what runs automatically.
Attributable: Every AI action is recorded as an event, attributed to AI, alongside every human action.
Replayable: Because it’s in the ledger, you can reconstruct exactly what the AI did, and when — on any date.

03 · Identity & access

Sign in with what you have: Google, Microsoft or any OIDC provider. MFA supported.
Least-privilege collaborator links: clients, suppliers and contractors arrive on time-bound, revocable links. No extra seats, no shared logins.
Roles you control: grant exactly the access each person needs. Every role change is itself an event in the audit trail.

04 · Hosting & data

AtlasKite is a managed cloud service — secure regions, no servers for you to run. Need on-prem or your own cloud? That’s what AtlasOPX is for.

Your tenant: Your data lives in your tenant. AtlasKite operators don’t have standing access to it.
Export: Export your data whenever you want. No lock-in to our formats.
Deletion: Customer-initiated deletion is supported per the terms; the audit-log obligation is respected.

05 · Responsible disclosure

Good-faith security reports are welcome and we take them seriously.

Early access ahead of launch. No spam — just a heads-up before we open the doors.