Atalaya · Security and governance
Real control over who sees what and who does what.
A security platform has to be secure by design. Atalaya enforces boundaries in the backend, records every operation and protects personal data at the architecture level.
Workspaces and data scopes
Isolation by subsidiary, site, country or source, enforced in the backend: hiding buttons is not enough.
- Data scopes per workspace
- The same boundary applies to searches, reports, agents and workflows
Roles and permissions
Global and per-workspace roles, with granular and visible permissions.
- Platform administrator, security developer, workspace administrator, SOC analyst, restricted analyst and executive viewer
- Memberships with expiry dates
- Effective permissions visible to each person
Audit log
Who did what, when, on which object and with what result, including agent and workflow actions.
- Built for audits and reviews
- Separate from technical logs, which are used to run the platform
Privacy by design
Personal data is handled with the minimum access required.
- Subject pseudonymisation
- A restricted vault for personal data
- Controlled access to original data
- Retention policies
Secrets management
Connector credentials are never shown in the interface and never leave the backend.
- Integration with the deployment’s secrets management
- Rotation without touching the views
Regulatory alignment
Designed to make compliance easier.
Atalaya is designed to make compliance and alignment with Spain’s National Security Framework (ENS), the NIS2 Directive and the GDPR easier, and to support the incident management and traceability these frameworks require.
Atalaya is not certified under ENS or ISO/IEC 27001. Compliance always depends on each organisation’s deployment and processes.
Honest interface states
The interface never pretends everything is fine.
- Loading
- Empty (with the coverage queried)
- No permission
- Partial data
- Stale data
- Error
- Approval required
Want to see Atalaya with your own use cases?
We walk you through the platform with scenarios close to your organisation’s and look together at how it would fit your current tools.