Yes, the Master Subscription Agreement applies to our AI-powered ITSM platform and related services. The Agreement also covers support services and advisory services when purchased. It does not apply to third-party products or integrations available through third-party providers (such as apps that interoperate with Atomicwork but are not provided by us).

Atomicwork's Data Processing Addendum (DPA) satisfies requirements under GDPR, UK GDPR, Swiss FADP, and U.S. state privacy laws including CCPA/CPRA. We ensure to act as a processor of personal data and process it only on documented instructions from the customers.

Atomicwork holds comprehensive security and compliance certifications including SOC 2 Type II, ISO 27001 (Information Security Management System), HIPAA compliance, GDPR and CCPA compliance, Microsoft 365 certification, and ISO/IEC 42001:2023 for AI Management Systems. Our security practices are built on the TRUST framework (Transparent, Reliable, User-centric, Secure, Traceable) ensuring responsible AI deployment and data protection at every layer.

Upon termination or expiration of your subscription, you have 30 days to request a download of your Customer Data in a commercially reasonable format. After this 30-day period, Atomicwork will delete or destroy all copies of Customer Data from our systems, except where retention is required by law or regulatory compliance.