Security
Capable agents, with the guardrails built in
An agent that can act is only worth having if you can see what it did and stop it. Atlas wraps a powerful open-source agent stack in the privacy, control, and reliability a practice needs.
Your practice data stays yours, and stays private
Everything your agents work with is kept in your own private space, never pooled with other practices, and used only for your work.
Every practice is walled off from every other
Each customer runs in its own sealed, single-use environment. What happens in your workspace stays in your workspace, with no path for one practice's information to reach another.
Nothing leaves without your approval
Anything that reaches a patient, a payer, or a vendor queues for a human. You set which actions need approval, and the default is that outbound actions do.
Scoped access, not a master key
Each agent gets access to what its job needs and nothing else. Connected accounts are scoped per agent, and you can revoke any of them independently.
There is always a record
Every action is logged in plain language, with what was done and when. Not a debug trace, a record you can read.
A kill switch that actually stops it
Stop one agent or the whole team, immediately, from anywhere in the product.
Compliance
One posture, both plans
Atlas is HIPAA compliant. It is operated by Casaway Capital, LLC, the same company as Dental Document, under the same business associate agreement and the same Delve-managed security program.
Every Atlas customer signs that business associate agreement at signup, before any use, on either plan. It is not an upgrade and it is not offered later. Signup runs through the Dental Document process, which is where the agreement is signed.
What differs between the plans is not compliance, it is whether Atlas reaches patient data at all. Connect does, through the practice management connection. Core has no practice management connection, so it works with no patient records and sends nothing to a patient. Both are covered.
A protected clinical space
Protected patient information is isolated in a protected clinical space, reached only through controlled and monitored paths, and logged on every access.
The practice management system stays the source of truth
Atlas reads from it and writes back only what you approve. It does not become a second, competing record of your practice.
Dedicated infrastructure
Atlas runs on dedicated infrastructure, not shared consumer cloud, with each practice sealed off from every other.
A managed security program
The security program is managed with Delve and is SOC 2 aligned.
Atlas provides architecture and safeguards; it does not by itself make your practice compliant with any specific regulation.
Questions
Ask us the hard one
If there is a specific control, contract, or data question standing between you and a decision, ask it directly rather than reading around it.