Security & Data Handling
What happens to your documents
Atlas reads the text of each file you upload. Scanned pages and photos are read with Google Cloud Document AI. The text is then sent to Anthropic's Claude API, which identifies the supply chain information in it: companies, products, species, places of harvest, shipments and plots.
The files you upload are not kept: they are deleted once processing ends. If a document contains links to files (for example Google Drive, Dropbox, OneDrive or ArcGIS), Atlas downloads and reads those files as well. API users can turn this off with followLinks=false.
AI training
Your documents, results and corrections are not used to train or improve AI models, by 11Foundry or by Anthropic. Atlas uses Anthropic's commercial API, whose terms exclude customer content from model training. Nothing from one Atlas account is included in the AI requests made for another.
What Atlas keeps, and for how long
| What | How long |
|---|---|
| Extraction results | Your plan's history: the 5 most recent on Free, 50 on Pro, all on Enterprise. Older results are deleted as new ones arrive. |
| Text read from your documents | 30 days, so that you or your integration can retrieve it again. |
| A record of each AI request (the text sent and the response) | 7 days, for troubleshooting. Visible only to Atlas administrators. |
| Files downloaded from links in your documents | 7 days. |
| Your corrections and consolidated shipment records | With your results, until you delete them or your account. |
| Database backups | Taken nightly, with a copy stored off-site; each is kept 7 days. |
| Account and activity records: your history list (document names, dates, counts), sign-ins with IP address and browser, terms acceptance, account changes | While your account is open; see below for what happens when it closes. |
| Usage and billing records | Kept for accounting. |
Atlas also keeps your most recent results in your browser's local storage, on your own device.
Deleting your account
Deleting your account (Account Settings, Delete Account) immediately deletes your results, the text read from your documents, AI request records, downloaded files, corrections and consolidated shipment records. They leave our backups within 7 days. Document names are removed from your history and activity records.
We keep your email address, so that a closed free account cannot be registered again; usage and billing records; and activity records, without document names. For an account managed by a partner platform such as Beacon, the platform closes the account, and its data is deleted after the platform's grace period (90 days by default).
Who can see your data
Each account's results are available only to that account: its sign-in and its own API key. Atlas administrators (11Foundry staff) can access stored data to run the service, provide support and troubleshoot.
Data goes to another 11Foundry product or connected system only when you or your platform use it: Command Center when you push results to it, Beacon for accounts Beacon manages, and the TRACES filing service when a filing is prepared.
Service providers
| Provider | What for | What it receives |
|---|---|---|
| Railway | Hosting, database and backups | Everything Atlas stores |
| Microsoft Azure | Off-site copy of the nightly backup | Everything Atlas stores |
| Anthropic | Reading documents; risk predictions | Document text and names, extracted data |
| Google Cloud Document AI | Reading scanned pages and photos | Page images |
| Sentry | Error monitoring | Technical error details, without document content, request bodies or personal data |
| Stripe | Payments, on paid plans | Email address and billing details |
| Our email delivery provider | Account emails | Email address and the message |
Atlas's servers, database and backups are in the United States (Railway, US West; the off-site backup copy is in Microsoft Azure's US West 2 region, with a geo-redundant copy in US West Central). Document AI runs in Google's US region. In your browser, Atlas pages load fonts from Google Fonts and the map library from unpkg; map tiles come from OpenStreetMap, which sees the map area you view.
Security measures
All traffic is encrypted with TLS, and browsers are told to use HTTPS only. Passwords are stored with bcrypt. API keys are stored as SHA-256 hashes and shown once. Sign-in sessions expire after one hour, and repeated failed sign-ins lock the address out for 10 minutes. Command Center credentials are stored encrypted. Error reports carry no document content. Multi-factor authentication is not yet available.
Questions
Write to info@11foundry.com. Changes to how Atlas handles data are noted on this page.