heyAtlas follows a layered approach to protect your logistics operation data.
Encryption and secrets
- API keys and passwords are stored encrypted in the database; never in plain text and never shown again after saving.
- Credentials are decrypted only while a tool runs, to connect to the target external system.
Company isolation and access
- Data is isolated per company; one company cannot access another's data.
- User access is based on roles and permission profiles; sensitive operations are written to the audit log.
Retention and transparency
- You set your own retention period for business data (messages, conversations, automation runs): a single period (30–365 days) or separate periods per data type; a company period can only shorten the platform period. File attachments have a separate period (30–3650 days).
- Before you shorten a period, the portal shows at least how many records the next purge will permanently delete and asks for your confirmation.
- Platform-wide retention policies and the sub-processors in use are shown transparently in the portal.
- Financial records with legal retention obligations are independent of these settings.
- In time-limited test accounts, data is deleted or anonymised after the test ends or the account is closed, within the period set out in the Test Account Terms of Use (no later than 90 days); records that must be kept by law are retained.
Approval and human control
- Risky/irreversible operations can be gated behind human approval in chains and conversations; nothing happens until approved.
After signing in you manage these under Settings → Data and Settings → Credentials.
