Aten Security · Legal
Privacy Policy
Last updated: October 8, 2026
Introduction
This policy covers Aten Security, Inc., atensecurity.com, and Thoth trial accounts. Personal information includes information that identifies or relates to an individual. Contact privacy@atensecurity.com with questions or requests.
Information we collect
For trial signup we collect your verified work email, company domain, account role, and your description of the agent risk you want to address. Authentication and administration also generate security and account activity records. Thoth processes the action metadata (including tool names and tool arguments), policy configuration, approval decisions, and decision evidence you submit. Tool arguments may be retained with decision evidence for policy review and replay within the trial retention period. Avoid submitting secrets, customer data, or sensitive personal information during evaluation. Website visits may generate IP address, device, and interaction information.
How we use information
We use information to verify access, administer your company's evaluation, evaluate agent actions against policies, provide decision evidence, respond to support requests, and protect the service. With acceptance of the trial data disclosures, reviewed approvals may be used as training labels to improve enforcement. Contact us to request deletion of retained records and training data. Do not assume that deleting an account alone completes a training-data deletion request.
Service providers and disclosures
Amazon Web Services (AWS) provides trial hosting and infrastructure. WorkOS provides authentication and organization access services. Our public website uses Sanity for content and Amplitude and Apollo for website analytics and visitor information. Website analytics are separate from Thoth decision evidence. We may disclose information to service providers supporting these purposes, professional advisers, authorities when legally required, or a successor in a business transfer. We may also disclose information at your direction.
Trial retention and deletion
Your company has one 30-day evaluation starting when its first user verifies their work email. An approved extension changes its expiry date. After expiry, policies and decision evidence remain available read-only for 30 days; enforcement, approvals, and new API keys are disabled. If you convert during this period, your policies and evidence continue under your paid agreement. Otherwise, trial policies and evidence are deleted after this period. Export evidence before the retention period ends. Deletion requests can be sent to privacy@atensecurity.com. We retain a minimal company-domain record to prevent repeat evaluations, and may retain information required for security, legal obligations, or resolving disputes; this does not authorize retaining trial evidence indefinitely. Operational backups may contain deleted records until their normal rotation completes and must not restore them to an active account.
Security and location
We use access controls and security measures to protect information, but no internet service can guarantee absolute security. The hosted trial runs in AWS in the United States. Service providers may process information in other locations subject to their applicable safeguards. This policy does not claim a security certification or regulatory compliance.
Cookies and website analytics
Our website uses analytics and visitor tools that may process identifiers and interactions. You can control cookies and storage through your browser settings; restrictions may affect site functionality. Authentication storage is used to support signed-in access. Analytics information is not necessarily anonymous.
Your privacy rights
Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of personal information, or to object to or restrict processing. California residents may also request information about collection and disclosure and exercise applicable opt-out rights. Send requests to privacy@atensecurity.com. We verify identity and authority before releasing or deleting company records and respond within applicable legal deadlines.
Children's privacy
The trial is for developers and organizations, not children. We do not knowingly collect personal information from children under 13 without legally required parental consent. Contact privacy@atensecurity.com if you believe a child has submitted information.
Policy changes
We may update this policy as the service or legal requirements change. The date above identifies the published version. Material changes to trial data uses will require appropriate notice or consent.
Questions? privacy@atensecurity.com