Your business data, safely automated.

Atlas plugs into your phone, inbox, calendar, spreadsheets, and CRM without ever asking for a password.

• You authorize, we never see credentials. You click "Connect" and sign in on your provider's own page (Google, your CRM). Your password goes to them — never to us.
• We hold a revocable token, not your login. What Atlas receives is a scoped access token that only permits the specific actions you approved.
• Encrypted at rest. Tokens are stored encrypted (AES-256) on SOC 2 Type II certified infrastructure.
• You hold the kill switch. Revoke Atlas's access anytime from your own Google/CRM security settings — instantly, without asking us.
• We can't leak what we never hold. No password database exists here to be breached.

Only what's necessary to run the automations you bought. Nothing else.

Things we explicitly never touch, so you don't have to wonder.

Physical infrastructure, by tier. Your data & connected accounts stay isolated — never co-mingled. You can ask which region you're hosted in at any time.

Industry-standard everywhere, no exceptions.

Every text Atlas sends is opt-out-safe. STOP is honored automatically, at the lowest level of every send path — so no skill can ever bypass it.

• STOP auto-handles instantly. If a customer replies STOP, UNSUBSCRIBE, CANCEL, END, or QUIT, they're added to a permanent blocklist and Atlas never texts them again.
• The check lives below every skill. Speed to Lead, the Receptionist, Follow-Up, Reactivation — every path that sends a message passes through one blocklist gate. There is no code path that can skip it.
• A2P 10DLC registration handled for you. During onboarding we file your business's carrier registration through Twilio — the legally compliant route for business SMS (carrier approval typically takes 1–2 weeks).
• Quiet hours respected. Automated texts honor reasonable local sending windows — no 2 AM messages to your customers.
• Blocked attempts are logged. Every time the blocklist stops a send, it's recorded in your audit log for proof of compliance.

Atlas doesn't talk to your customers unsupervised on day one. It earns that.

• Every draft comes to you first. For the first ~30 days, every customer-facing text and email Atlas writes is held for your one-tap approval in Slack before it sends. This is enforced in the engine across every skill — not a setting you have to remember to turn on.
• Your edits tune the voice — and Atlas keeps learning it. Atlas is seeded with samples of how you actually write, and every week it automatically refreshes its voice from your real replies and sent emails. The longer it runs, the more it sounds like you — it never learns from its own output, only from yours.
• You decide when the wheels come off. When you're approving without editing, supervision ends — and can be extended or re-enabled any time you want it back.

Atlas never invents a price. Any number that goes out to a customer is checked against your real catalog before it leaves the building.

• Catalog-anchored. Quotes and prices are validated against your approved price list, within a tight tolerance (5%). Anything outside that is intercepted.
• Channel-aware intercept. If a figure can't be verified, Atlas does not send it to the customer — it pauses and routes the message to you instead.
• You get an urgent alert. A flagged price fires an immediate Slack alert so you can confirm or correct before anything reaches the customer.
• Protects your margin and your word. No surprise discounts, no hallucinated totals, no quote you'd have to walk back.

Every action Atlas takes is written to an append-only audit log. Nothing is silently edited or erased.

• Append-only by design. Records are added, never overwritten or deleted out from under you — so the trail can't be quietly rewritten.
• Every action, timestamped. Each text sent, doc processed, lead booked, price flagged, and STOP honored lands in the log with a timestamp.
• Yours to inspect on demand. Full read access to the log of everything Atlas has done on your behalf, any time you ask.
• Retained for compliance. Audit logs are kept for 12 months by default, then archived — available on request for compliance reviews.

A short, accountable list.

• Eric Liles (owner of Liles Automation) — direct access for support, debugging, and tuning
• Automated systems — Atlas itself, scheduled jobs, monitoring tools (no human reads the data they process)
• You — full read access to all your data via your Slack workspace and Google Sheets

Access controls in place:

• Two-factor authentication required on every internal tool
• Database access logged · audit trail retained for 12 months
• No shared credentials · all access tied to identifiable accounts
• Subcontractors (when used) sign NDAs and DPAs before being granted access

Every third-party service we use, what data they touch, and their certifications. We notify you in writing before adding new ones.

Where we stand today and what's coming.

How long we keep your data, and what happens when you leave. Retention is configurable per client — tell us your policy and we'll set it.

It's your business. It's your data. No locked-in clauses.

• Export anytime. Full CSV/JSON dump of all your data within 7 business days of a request, no charge.
• Delete anytime. 30-day grace period after cancellation, then permanent deletion with written confirmation.
• Inspect anytime. Full audit log of every action Atlas has taken on your behalf, available on demand.
• Restrict processing. You can pause specific skills, retroactively delete specific conversations, or limit what Atlas can do.
• No long-term lock-in. Cancel any time with 30 days notice. No multi-year contracts (unless you opt in for the Enterprise annual discount).
• Portability. All exported data is in standard open formats — Google Sheets, CSV, JSON. You can move it to another system on day one.

What we'll do — and how fast — if something goes wrong.

Additional commitments included when you're on the Atlas Enterprise plan. The dedicated-infrastructure guarantees below apply to Enterprise only.

• Custom Data Processing Agreement (DPA) — negotiated and signed at onboarding
• Dedicated server — your own VPS, physically separated from all other clients (Enterprise only)
• Dedicated database — your own Postgres instance, not a shared schema (Enterprise only)
• Custom retention — tell us your policy, we follow it
• Custom incident SLA — typically tighter than the standard 24-hour notification
• HIPAA-eligible — signed BAA available for medical/dental clients
• Annual security review — written attestation of controls in place
• Right of audit — on reasonable notice, you can audit our practices

Real humans, real responses. Most queries answered within one business day.

Need an NDA, DPA, BAA, security questionnaire response, or SIG Lite filled out? Email security@lilesautomation.com and we'll turn it around within 3 business days.