Access you can control.
Atlas One separates each organization's data, lets you require multi-factor authentication, and gives every user a role that defines what they can do.
What Protects Your Data.
From how people sign in to how support gets access, each control below ships in Atlas One today.
Sign-In Security
Each organization can require multi-factor authentication for its users. Vendor access is limited by design.
- Required MFA, set per organization
- Vendor logins are time-limited and scoped to one location
- MFA is always on for vendor logins
- Single sign-on (SSO): Coming Next
Data Isolation
Each organization's data is separated from every other organization's with row-level data isolation in the database.
- Row-level data isolation between organizations
- Locations hierarchy for scoping access
- Role-based permissions
Support Access
When Atlantis Frontline support needs to see what a user sees, access is gated and recorded.
- Sign In As User requires MFA
- A typed reason is required
- Sessions are limited to 60 minutes
- Every session is audit logged
Logs and Hosting
Logs are split by area so admins can find what happened. Atlas One runs on established hosting providers.
- Logs by area
- Background records pruned after 90 days
- Hosted on Supabase (Postgres) and Vercel
- Data encrypted in transit (HTTPS)
Every User, a Defined Role.
Five roles ship with Atlas One, and admins can add custom roles with their own permissions.
| Role | What They Can Do |
|---|---|
| Admin | Manages organization settings, users, roles, Brand Studio, and logs. |
| Editor | Builds and launches missions and edits atlases. |
| Manager | Runs and reviews missions for their locations. |
| Associate | Completes assigned work in My Work. |
| Vendor | Uses My Work and Calendar for one location, plus optional read-only views an admin turns on. |
| Custom Roles | Admins can create roles with their own set of permissions. |
Simple Sign-In, Required MFA.
Users sign in with email and password. Organizations can require multi-factor authentication with an authenticator app. Single sign-on is Coming Next.
Separate by Organization.
Each organization's records are isolated from other organizations at the row level, and data is encrypted in transit over HTTPS. Atlas One is hosted on Supabase (Postgres) and Vercel.
See Security and Access in Action.
Get a walkthrough of roles, MFA, and logs with the Atlantis Frontline team.