Trust
Nothing leaves without your yes.
Atlas works on your real files, mail and calendar. Anything that reaches other people asks first, or follows a standing yes you gave for one named job. You can end it any time, and every send leaves a receipt.
Approvals and levels.
Every action has one of four levels. The server checks the level before the action runs, and a yes is a signed approval. Atlas cannot raise its own level or approve for you.
- Does itReads your calendar and mail. Sets a reminder. Looks things up.
- Does it, then tells youMoves a task. Adds an event only you are in. Each one comes with a receipt and Undo.
- Asks you firstEmail to anyone else and invites with guests, unless you gave a standing yes for that job. Anything else it cannot take back.
- NeverPaying or buying for you. Deleting anything for good.
A card you do not answer closes after 10 minutes with nothing sent. If a check cannot be made, the step does not run.
- A yes is signedWhen you tap Approve, the server signs it. The tool that would act checks the signature and refuses without it.
- Atlas cannot approve itselfNo agent can raise its own level or sign for you. The signing key never goes near the AI.
- Enforced in codeThe level is checked by the server, not just written into a prompt, so a clever message cannot talk an agent past it.
A standing yes
One named job, with limits.
If you want an agent to do one job without asking every time, you can give it a permission. It lists what the agent may do, who it may reach and how many a day, and it lasts until it ends or you take it back. Sends under a standing yes show in amber, so you always know.
- Giving more asks for your codeTaking it back never does.
- Checked again every timeThe server checks every rule again before each use, and every use leaves a receipt.
Undo and receipts
Every change leaves a receipt.
Activity lists what Atlas did and what you approved, newest first. Small changes have an Undo next to them. Deleted items stay in Trash for 30 days, then are removed for good. A sent email can't be unsent, so it asks first, unless you gave a standing yes for that job (shown in amber).
Atlas Shield
Private details are hidden before the AI sees them.
Shield swaps cards, bank numbers, SSNs, passwords, keys and codes for stand-ins before anything goes to an AI model. Private and Strict also hide email addresses, phone numbers, street addresses and names it can recognise. Passwords and card numbers are never saved by Atlas, even when you approve.
- StandardCards, bank numbers, SSNs, passwords, keys and codes.
- PrivateAlso email addresses, phone numbers and street addresses.
- StrictAlso names and companies it can recognise. It can miss other names.
Shield hides the shapes it recognises, so an unusual format can slip through, and it cannot look inside pictures. You can keep pictures from the AI entirely.
Who sees what, and why.
Only what a request needs is sent, and only when you use that feature.
| Service | What it gets | Why |
|---|---|---|
| OpenAI | The AI that reads and writes. Your message and what Atlas needs to answer it, after Shield has hidden private details. | To answer you. Atlas tells OpenAI not to keep the conversation, and OpenAI does not train on it. Like every business customer, OpenAI may keep request logs for up to 30 days to check for abuse, then deletes them. |
| Your sign-in. And, only if you connect them, what you ask Atlas to do in Calendar, Gmail or Drive. | To sign you in and to act in your own Google account. | |
| Tavily (web search) | Search words only. Atlas refuses to send searches that contain email addresses or phone or card numbers. | To look things up on the web. |
| MET Norway (weather) | Your home area, rounded to about 1 km. | For the weather on Home. |
| Apple, Google or Mozilla push services | An encrypted notification for your device. | To deliver notifications. They pass it on and cannot read it. |
| Cloudflare | Your requests pass through it on the way to the website and the app. The sign-up bot check. | To serve the website and carry traffic. |
| Supabase and Oracle Cloud | They host the database and the server, so your data is stored and processed there. | To run Atlas. Atlas staff do not look at your data, except when you ask for help with a problem. |
The full list, with how long each thing is kept, is in the privacy policy.
No ads. No selling your data.
Atlas has no ads and no trackers, and the app has no analytics. The website uses Google Analytics only if you click Accept, and you can change that any time in Cookie settings. Atlas does not sell or share your data. Your records are yours.
Nothing you do in Atlas is used to train an AI model.
Export and delete your data.
Export: Settings, Privacy and data, Export my data. You get one file with everything stored for your account, in a format any program can read.
Delete: Settings, Privacy and data, Delete account. Atlas stops working for your account at once, deletes the keys of your connected apps, and removes your account and every record it owns within minutes. Backups made before that roll off within about four weeks.
You can also disconnect any app from Settings at any time.
Report a security issue.
If you think you have found a security problem in Atlas, please write to security@atlasiw.com. Tell us what you found, where, and how to reproduce it. Please do not include other people's data.
We read every report, and we will tell you when it is fixed. Please give us a reasonable time to fix a problem before you share it publicly.