Security
Built as a control layer.
This page states only what the product does today. For a review, questionnaires, or subprocessors under NDA, write to hello@brandatlas.ai.
Workspace isolation
Data is scoped to an organization. Brands, assets, products, knowledge and claims live inside that boundary. Requests resolve through authenticated context — not a shared public pool.
Access
People sign in to the app. Programmatic access uses API credentials. MCP connections authorize with OAuth and can be scoped to a brand or the organization.
Provider keys
The Claims gateway can use customer-supplied provider keys (bring your own key) so completions run against your upstream account. We do not publish a claim that customer content trains Brand Atlas foundation models — ask us if you need a written position.
What Claims is not
Claims is a policy engine for brand execution. It is not legal advice, and it does not sit on every employee message or every system unless you route that traffic through Check or the gateway.
Enterprise review
SSO, security questionnaires, and a dedicated specialist are available on Enterprise. We will not list certifications here until they are current.