## Security and Compliance

URL: https://docs.atlan.com/faq/security-and-compliance

> Complete guide to Atlan's security features, compliance certifications, and data protection capabilities.

Complete guide to Atlan's security features, compliance certifications, and data protection capabilities.

### What compliance certifications does Atlan hold?

Atlan is certified or compliant with multiple frameworks, including **SOC 2 Type II**, **HIPAA**, **ISO 27001**, **GDPR**, and others. For a full list of certifications, audit reports, and assessments, see [Compliance standards and assessments](https://docs.atlan.com/platform/references/compliance-standards-and-assessments).

### Do you support HIPAA?

Yes, Atlan is HIPAA compliant. Visit [Atlan's security portal](https://security.atlan.com) to view the attestation letter from an external auditor.

### Do you support SOC 2?

Yes, Atlan maintains SOC 2 Type II compliance certification. Visit [Atlan's security portal](https://security.atlan.com) to access compliance documentation and reports.

### Do you support ISO 27001?

Yes, Atlan is ISO 27001 certified. ISO 27001 is the internationally recognized standard for information security management systems (ISMS). Visit [Atlan's security portal](https://security.atlan.com) to access the certificate, or see [Compliance standards and assessments](https://docs.atlan.com/platform/references/compliance-standards-and-assessments) for a full list of frameworks.

### Do you comply with GDPR?

Yes, Atlan is GDPR compliant. See [Compliance standards and assessments](https://docs.atlan.com/platform/references/compliance-standards-and-assessments) for details on how Atlan meets GDPR obligations.

### How does Atlan protect the data at rest?

Atlan implements comprehensive data protection measures. For detailed information, see [Encryption and key management](https://docs.atlan.com/llms/platform/get-started/encryption-and-key-management/llms.txt).

### How's security enforced in Atlan?

Atlan uses Kubernetes in an Atlan-managed VPC (virtual private cloud). The data in Atlan is secured in the following ways:

- [Infrastructure security](https://docs.atlan.com/llms/platform/get-started/infrastructure-security/llms.txt): Restrict network access to the control planes as well as nodes.
- [Access policies](https://docs.atlan.com/llms/governance/access-control/what-are-purposes/llms.txt): Administrators can restrict user access to certain assets.
- [Bring your own credentials (BYOC)](https://docs.atlan.com/llms/governance/access-control/provide-credentials-to-query-data/llms.txt): Users can provide their own data store credentials to query data.

### What data is Atlan actually bringing in?

Atlan enables you to search and discover metadata, not the data itself. 

As the context layer for your data assets, Atlan enables you to:

- Extract metadata from source systems via pushdown queries or API requests.
- Process data with the [sample data](https://docs.atlan.com/llms/catalog/discovery/provide-credentials-to-view-sample-data/llms.txt) and [query](https://docs.atlan.com/llms/catalog/insights/query-data/llms.txt) features, both of which can be turned off.
- Push down queries when sample data or query functionality is used, so, the results are neither cached nor stored in Atlan.
- Integrate with your [supported data sources](https://docs.atlan.com/llms/catalog/connector-capabilities/supported-sources/llms.txt) via a service account with read-only permissions to the data source and complete control over these permissions.

### What Atlan IP address can I add to my organization's firewall?

If your organization's firewall only allows access from whitelisted IP locations, you can [contact Atlan support](https://docs.atlan.com/support/submit-request) to provide you with your Atlan IP address.

---