Skip to content

Trust and privacy

Atlato ABC is built so that you decide what other people, and the AI, can see and do. This page explains what stays private, what gets shared, and the controls your workspace’s admins have.

Your AI chats belong to you. Nobody else can read them: not the person who gave you the work, not other people on the task, not even the workspace owner. Your own activity history, the step-by-step record of your chats and agent runs, is yours alone too.

What other people see is only what you deliberately hand over: the context you pick for a breakaway, or the result you submit when you finish one.

Team chats are different. They are group conversations, and everyone in the team can read them.

When you hand part of a chat to someone else as a breakaway, you choose exactly which messages and files go with it.

  • What you pick is copied at that moment. If you later change your chat, the breakaway doesn’t change.
  • The other person never sees anything you didn’t select.
  • When they finish, you get their result, not their private working.

The AI can read from your connected apps, but before it changes something (sending an email, creating an invoice, posting a message) it stops and asks you. You see what it wants to do and choose Allow once, Allow for this chat or Deny. Anything that deletes or overwrites carries a warning.

Workspace owners and admins decide, action by action, what is always allowed, what needs approval and what is blocked. See Tool permissions.

Elves ask in the same way. When an elf plans a task, it lists the changes it will make in your apps, and you approve them up front. See Elf approvals.

  • API keys are encrypted and never shown again once saved, not even to you. This covers your AI provider keys and your web search keys.
  • App sign-ins are your own. Each person connects an app with their own account. Sharing a connector, a plugin or a web search tool shares the setup, never your login or your key.
  • The AI sees what your account sees. A connected app only ever shows the AI what your own account in that app can see.

What the assistant remembers about you is visible only to you, and is kept separately in every workspace you belong to. You can read it, change it or stop the AI from saving to it at any time. Workspace memory is shared with everyone, and only owners and admins can change it. See Memory.

Your workspace’s owners and admins have a set of controls that apply to everyone:

  • Role templates decide what each person can see and do, area by area. See Role templates.
  • IT Manager Approval makes new skills, connectors, plugins and other items wait for an admin’s approval before anyone can use them. See Approvals.
  • Guardrails are workspace policies the AI follows in chats and agents. See Guardrails.
  • Credit limits stop any one person from using up the workspace’s credits. See Member credit limits.
  • The audit log records important actions in the workspace, so admins can see who did what and when. See Audit log.
  • Taking over an elf’s browser. When an elf needs you in its browser, for a sign-in or a check it can’t do itself, you take over, finish the step and hand it back. While you are in control, the elf can’t see what you type. See Take over the browser.
  • Pixie contacts. On a contact’s page in the phone book, turn off Remember this person and pixies keep what they already know but learn nothing new from that person’s calls. Do not call stops pixies ringing them, though their calls in are still answered. See Phone book.
  • Dashboards. A dashboard you build shows the data you’re allowed to see. When you share it, the people you share it with see it as you do, and nothing else of yours. Share a dashboard only with people who should see its data. See Share and export.