Atomicwork

Founded in 2022

Atomicwork is an AI-native IT service management (ITSM) platform built for a blended human and AI workforce. It enables IT, HR, Security, and Finance teams to deploy and govern purpose-built AI Coworkers that resolve employee requests, manage incidents, and handle access provisioning, with human oversight and governance built into every step. Because our platform processes employee and operational data on behalf of our customers, we treat security, privacy, and responsible AI as foundational. We maintain a defense-in-depth security program, enforce least-privilege access, encrypt data in transit and at rest, and hold our AI systems to formal governance standards. This Trust Center provides transparency into our security practices, compliance posture, and the controls we use to identify and mitigate risk, so customers can evaluate and trust Atomicwork with confidence. We continuously review and improve these practices as our platform and the threat landscape evolve.

Founded in 2022

Compliances

SOC 2

Compliant

ISO 27001

Compliant

GDPR

Compliant

CPRA (formerly CCPA)

Compliant

CSA Star

Compliant

HIPAA

Compliant

ISO 27017

Compliant

ISO 27018

Compliant

ISO 27701

Compliant

ISO 42001 v2023

Compliant

Controls

Product security

Production System User Review

Notification of changes

Data security

Identify Validation

Termination of Employment

Production Databases Access Restriction

App security

Conspicuous Link To Privacy Notice

Secure system modification

Testing of changes

Resources

Access Control Procedure

Policy

Compliance Policy

Policy

Asset Management Procedure

Policy

Data Breach Notification Policy

Policy

Privacy By Design Policy

Policy

Communications & Network Security Policy

Policy

Subprocessors

AWS

IT infrastructure

United Stat...

Ireland

Twilio

Collaboration & Productivity

United Stat...

Ireland

Sentry

Monitoring

United Stat...

Germany

GCP

Artificial Intelligence

United States of America

Azure OpenAI

Artificial Intelligence

United Stat...

Canada

+6 more

Groq

Artificial Intelligence

United States of America

Updates

Atomicwork achieves ISO 27701, ISO 27017, and ISO 27018 — with zero non-conformities

Aug 4, 2026

Atomicwork has successfully completed independent audits for ISO/IEC 27701 (privacy information management), ISO/IEC 27017 (cloud security), and ISO/IEC 27018 (protection of personal data in the cloud). All three audits closed with zero non-conformities — a clean result across the board.

What makes this milestone stand out is how we approached it. We had two years of surveillance runway remaining on these certifications and could have continued on the existing cycle. Instead, we made a deliberate choice to undergo a fresh, full audit with a new, independent certification body, Intercert.

The reasoning is simple: a new auditor brings a fresh set of eyes to our controls, processes, and dashboards, with no prior context and no assumptions. Inviting that level of scrutiny keeps us honest, surfaces blind spots, and holds our security posture to the highest bar. Passing a first-time audit with a new body and zero non-conformities is the strongest possible signal that our controls hold up under genuinely independent review.

Certificates and audit reports are available at trust.atomicwork.com/compliance.

SOC 2 Type II Re-Certification Successfully Completed

Mar 10, 2026

Atomicwork has successfully completed our SOC 2 Type II re-certification reaffirming our unwavering commitment to safeguarding customer data through the highest standards of security, availability, and confidentiality. This achievement is not just a renewal — it is a validation of the robust controls, processes, and practices that our teams uphold every single day. From continuous monitoring and access management to incident response and vendor oversight, our organization consistently demonstrates operational rigor across every layer of our platform. At Atomicwork, trust is built through action. SOC 2 Type II compliance requires sustained evidence of effective controls over an extended audit period, and our successful re-certification reflects the discipline and accountability embedded across our engineering, security, and operations teams. We remain deeply committed to earning and strengthening the trust of our customers and partners not through milestones alone, but through the everyday excellence that makes those milestones possible.

ISO/IEC 27001:2022 Surveillance Audit Successfully Completed

Feb 25, 2026

Atomicwork has successfully completed our ISO/IEC 27001:2022 surveillance audit — reinforcing our ongoing commitment to maintaining the highest standards of information security.

This milestone reflects the sustained effort across our organization. From maintaining rigorous controls and up-to-date documentation to demonstrating operational excellence during audit reviews, our teams continuously embed security and compliance into how we build, operate, and support our platform.

Security is not a one-time initiative at Atomicwork — it is a continuous, organization-wide commitment.

We thank our teams for their diligence and discipline, and we remain committed to earning and strengthening the trust of our customers and partners every day.

FAQ

How does Atomicwork comply with GDPR?

How does Atomicwork comply with SOC 2 requirements?

What measures are in place to protect sensitive information within Atomicwork systems?

How does Atomicwork ensure the availability of services?

What is the significance of user consent in Atomicwork's GDPR compliance strategy?

What are Atomicwork’s core security measures?

Create your own Trust Center | Powered by