Is Atlan safe with your data?
Atlan
Partial disclosure · high confidence
Atlan earns a C (59/100) because it discloses its data practices only in part.
#103
of 177 apps ranked
59
score · Data platform avg 63
-4
vs category average
Atlan's B2B privacy notice earns a mid-tier C. It includes a complete EU and UK data-subject rights addendum and names the EU-US Data Privacy Framework as a transfer safeguard. The grade drops because retention is vague ("as long as necessary" with no day-count), the security language is generic with no breach clause, and the notice says nothing about whether any data feeds model training.
What Atlan's privacy policy says about your data
Full data-subject rights
The EU and UK addendum lists access, rectification, erasure, restriction, portability in a machine-readable format, objection, and withdrawal of consent. It states an aim to process requests within 30 days.
Named transfer safeguard
Atlan certifies adherence to the EU-U.S. Data Privacy Framework with the U.S. Department of Commerce and keeps onward-transfer liability under the DPF Principles. This is a specific safeguard for international transfers.
Vague retention, no day-count
Retention is described only as keeping data for as long as it is required and no longer than necessary. There is no day-count or deletion timeline for the underlying data.
Generic security, no breach clause
Security rests on a variety of security technologies and procedures and appropriate physical, technical and organizational measures. The notice names no TLS, AES, or certification standard, and it never states a breach notification process.
What the policy is silent or vague on
- Not stated: keeping user inputs out of model training
- Not stated: a way to opt out of training
- Not stated: whether training use differs by plan
- Not stated: your ownership of generated outputs
Atlan privacy rating
Details
- Category
- Data platform
- Modalities
- text
- Processes biometrics
- No
- Policy last updated
- 2024-06-14
- Region scored
- Global / US-default
- Assessed
- 2026-06-20
Each grade reflects our analysis of what an app states in its public privacy policy and terms as of the assessment date. It measures the transparency of those documents, not the company's actual data practices, security, or compliance. Grades are our opinion, offered for general information. Full disclaimer.