Trust center
Reports, policies and controls in one place.
Everything a security reviewer or procurement team asks for. Gated documents are released under mutual NDA, usually the same business day.
Documents
- SOC 2 Type II reportUnder NDA
- Penetration test summaryUnder NDA
- CAIQ and SIG Lite responsesUnder NDA
- Privacy PolicyPublic
- Data Processing AddendumPublic
- Security PolicyPublic
- SubprocessorsPublic
Status
- SOC 2 Type II
- Current
- Hosting
- AWS us-east-2 (Ohio) with us-west-2 (Oregon) failover
- Platform status
- All systems operational
- Security contact
- security@atalielectric.com
Control overview
Access control
- MFA enforced for all users
- SSO and SCIM on Enterprise
- Quarterly access reviews
- Just-in-time production access
Data protection
- AES-256 at rest (AWS KMS)
- TLS 1.3 in transit
- Per-tenant keys
- Daily encrypted backups, 35-day retention
Application security
- Annual third-party penetration test
- Dependency and container scanning on every build
- Code review on every change
- Responsible disclosure program
Operations
- 24x7 monitoring and on-call
- Incident response plan tested twice a year
- Multi-AZ with us-west-2 failover
- Vendor risk reviews
People
- Background checks for all hires
- Security training at onboarding and annually
- Confidentiality agreements
- Least-privilege role design
Privacy
- Zero model training on customer data
- DPA with SCCs available
- Data subject request process
- 30-day deletion after termination
Stop overpaying commercial property tax on a flawed mass appraisal.
Upload an assessment notice. ATALI ELECTRIC returns a valuation audit and comp analysis in about two minutes.