Atlasby Regular Holding
Request Access
Atlas by Regular Holding
Security & Trust

How Atlas protects customer data,
stated plainly.

A precise account of the controls in place today. Not a certification. Updated as the program matures.

Encryption in transit and at rest

All traffic to Atlas is served over TLS. Application data is stored in a managed Postgres database that encrypts at rest.

Certified underlying infrastructure

Atlas runs on Cloudflare (edge, workers) and a SOC 2 Type II managed Postgres platform. Atlas itself is not yet independently certified.

Authentication

Sign-in via email and password or Google. Sessions are scoped per user and revocable.

Role-based access

Access is scoped by role. Row-level policies enforce which records each authenticated user can read or write.

Activity logging

Approvals, orders, payouts, and document access are recorded with actor and timestamp.

Data ownership

Your data belongs to you. Export and deletion requests are handled by writing to hi@regularholding.com.

Subprocessors

Managed Postgres (database, auth, storage), Cloudflare (hosting, edge), and AI providers for optional features. Full list available on request.

Compliance posture

Regular Holding is actively working toward SOC 2 Type I and ISO 27001. Atlas does not currently hold SOC 2, ISO 27001, HIPAA, or PCI certifications. GDPR is treated as ongoing operating practice.

Shared responsibility

Who is responsible for what.

Platform providers
Physical security, hardware, network isolation, encryption at rest, patched runtime, and TLS termination. Provided under SOC 2 Type II programs.
Regular Holding
Application security, access policy, tenant isolation via row-level security, activity logging, vendor management, incident response, and the internal security program.
Customer
Credentials, user provisioning and offboarding inside your workspace, and the accuracy of what you upload.
Legal disclosure

Regular Holding LLC is a New York limited liability company. Atlas is a governance, recordkeeping, and payment-processing platform. Regular Holding is not a bank, money transmitter, broker-dealer, custodian, fiduciary, or lender, and does not hold customer funds. Funds are transmitted by third-party payment providers and their partnered financial institutions, not by Regular Holding directly. Atlas is available to U.S.-organized operating companies. Full Terms of Service.

Report a security issue

Direct security and privacy reports to hi@regularholding.com. Receipt is acknowledged within two business days.

Last updated July 2026