AtomAI FedRAMP Trust Center

Secure Configuration Guidance

For agency administrators of the AtomAI Platform (Atom and Coordinate). Last updated 2026-10-14.

Identity and single sign-on

Connect your agency identity provider using SAML 2.0 or OpenID Connect before inviting users. Disable local password login once SSO is verified.
Require multi-factor authentication at your identity provider for every AtomAI user, with phishing-resistant methods (PIV/CAC or FIDO2) for administrators.
Enable automatic deprovisioning so users removed from your directory lose AtomAI access the same day.

Roles and permissions

Assign the least-privileged role that lets a user do their job. Reserve the Administrator role for a small named group and review membership quarterly.
Use separate roles for field staff, office staff, and read-only reporting users.
Restrict inventory type and work order configuration changes to administrators.

Sessions and devices

Set the idle session timeout to 15 minutes or less and the maximum session length to 12 hours or less.
Require agency-managed devices for the mobile app and enroll them in your mobile device management program.

Data and integrations

Create a dedicated service account with a scoped API key for each GIS or ERP integration. Rotate keys at least annually and when staff with access leave.
Export audit logs on a schedule to your agency SIEM and review administrator actions monthly.

Questions

Contact the AtomAI Security Team at fedramp-security@atom-ai.com.