Security
How we protect your records
This page describes what the product does today. We do not claim certifications we have not earned.
Each organization is separate
Every organization works on its own address, and the database itself enforces that one organization's records can never be read by another.
Protected accounts
Sessions are stored on our servers and can be ended at once. Staff can turn on two-step verification, and platform staff must use it.
Deliberate issuing
Certificates are issued only after a person approves a frozen batch. Issuers are reviewed by our team before public issuing.
An activity log
Changes to members, batches and certificates are recorded with who made them and when. Entries are never edited.
Minimal public pages
Verification pages show only the certificate details needed to check it. Private records show no personal details at all.
Private files
PDFs, imports and exports are stored privately and served only to people allowed to see them. Exports are deleted after seven days.
What we do not claim yet
- Atharix does not hold ISO, SOC or similar certifications.
- The production hosting provider and region will be published before launch.
- Privacy and service terms are drafts pending legal review.
Found a security issue?
Tell us through the contact form and choose Something else as the topic. Please do not include personal data of others.
Contact