Security

The right people see the right work. Nobody else does.

Atom holds your projects, your people's leave and your invoices, so access is designed in from the start.

Your organization is its own space

Every project, task, leave request, attendance record and file belongs to exactly one organization.
Opening a workspace URL checks that you're a member of that organization before anything is shown. Guessing an address gets you nothing.
Notifications belong to one person and are never visible to anyone else.

Atom's permission catalog covers 143 actions across 37 areas: projects, tasks, chat, leave, attendance, finance, files, settings and more.
Every workspace starts with owner, admin and member roles. You can create your own roles, and one person can hold several.
Checks run on the server for every action, not only in the interface. A hidden button is never the only barrier.
Nobody can grant a permission they don't hold themselves.
Teams decide which projects a person can open, and chat mentions can only reach people who can already see the work.

Two-factor authentication with an authenticator app, on the web and in the mobile apps.
Sign in on a shared computer by approving it from your phone, with a one-time code that expires after 3 minutes.
There is no public sign-up form. People are added to your organization, and each person sets their own password from a private email link.
Sessions expire, and you can sign in on several devices and sign out of each one.

Drive files are kept in private storage, separate from public assets like profile pictures.
Files upload directly to storage through short-lived signed addresses.
Personal My Files stay private unless the owner shares an item with a named colleague. Admins can't see them either.
Public links can carry a password, an expiry date and a download limit. They can be revoked, pause while the file is in the trash, and stop working when their creator leaves the organization.
Public link pages tell browsers not to pass the link on and tell search engines not to index it.
Every view and download in the Drive is logged with its device. Deleted files can be restored for 30 days before they're permanently removed.

A member-facing activity feed shows what moved on projects and tasks, and who moved it.
An append-only audit log records role changes and deadline changes.
Live updates carry only a signal to refresh. The data itself is always fetched again through the same permission checks.

Send it with your request. We'll answer it against how Atom is actually built.

See how Atom can help your team plan, collaborate, manage work, and make better decisions.