AI security for Atera’s autonomous AI agents

Atera is committed to developing and using AI in a secure, ethical, and trustworthy way. The guiding principles behind Robin and AI Copilot, our autonomous AI agents for IT, are backed by Atera’s certification to ISO 42001, the international standard for AI management systems.Atera is also certified to ISO 27001, 27017, 27018, and 27032, holds SOC 2 Type II certification, and complies with HIPAA and GDPR.

Important

Your prompts (inputs) and completions (outputs), your embeddings, and your training data:

are NOT available to other customers.
are NOT used to improve OpenAI models.
are NOT used to train, retrain, or improve Azure OpenAI Service foundation models.

The Azure OpenAI Service is operated by Microsoft as an Azure service; Microsoft hosts the OpenAI models in Microsoft’s Azure environment and the Service does NOT interact with any services operated by OpenAI (e.g. ChatGPT, or the OpenAI API).

Microsoft Security Page

Setting the standard for responsible AI in IT

The widespread adoption of generative and autonomous AI systems demands that the tech industry adopt strong internal security practices to safeguard users, systems, and data. As an innovation-first company, Atera aims to not only keep pace with leading companies in responsible AI development, but also set a new standard for the IT industry by embedding robust, transparent security principles into our AI.

Data privacy and governance

Your data is exclusively yours. Robin runs on Microsoft Azure OpenAI, providing enterprise-grade security with all customer data stored within the United States and the European Union. Your information is never used to train OpenAI, Microsoft, or Atera models, and all customer environments are logically isolated within Azure, ensuring no cross-tenant data access.

Human oversight

You are always in control. Atera’s AI agents are designed to augment your team, with administrators governing all behavior through custom policies. Mandatory human approval is required before any high-risk script or code is activated. Robin presents it as a suggestion; a technician must review and explicitly enable it. Approval workflows are fully customizable: define who approves, set escalation criteria, and pull approval data from Azure AD, Workday, or your HR system of choice.

Secure-by-design

Atera provides multi-layer security through a secure-by-design framework. Robin’s actions are restricted to predefined IT support boundaries you control, and high-sensitivity tasks like password resets require mandatory MFA to verify the requester’s identity. Two independent protection layers safeguard every session: Microsoft Prompt Shield blocks abusive or malicious activity, while an AI-as-a-judge mechanism reviews Robin’s outputs to ensure they align with expected behavior. Either can terminate a session or trigger a workflow if needed

Transparency and accountability

Atera eliminates AI’s “black box” by providing complete visibility and control. Every action Robin takes is logged under a unique Robin technician ID, capturing the original user prompt, Robin’s reasoning, and the executed action or code. This delivers greater traceability than a human technician, since every step is recorded. All audit logs are exportable manually or via API, and Atera offers direct SIEM integration so Robin’s activity can be forwarded to your SOC or SIEM platform.

Atera’s AI management system under ISO 42001

Atera operates a certified AI management system (AIMS) in conformance with ISO 42001.
The AIMS sets our AI policy, assigns clear roles and accountability for AI governance, and drives AI risk and impact assessments across the AI lifecycle, all maintained through continuous cycles of monitoring and improvement.
Every feature of Robin and AI Copilot, our autonomous AI agents for IT, is governed by this system, and the sections below describe how it works in practice.

Your data, your control

In line with the data governance principles of ISO 42001, your data stays exclusively yours. All AI models used for Robin are hosted on Microsoft Azure OpenAI, ensuring enterprise-grade security, with all customer data stored within the United States and the European Union. Your data is never shared with OpenAI, Microsoft, or used to train any AI models, including Atera’s own. To meet the standard’s requirements for isolation and protection, all customer environments are logically isolated within Azure with no cross-tenant data access, and all data is encrypted both at rest and in transit.

Risk-rated action control

Reflecting the AI risk and impact assessment principles at the core of ISO 42001, every action Robin can take is risk-evaluated before it is allowed to operate in your environment. Atera provides hundreds of built-in actions and diagnostics that are developed, maintained, and rigorously tested by our engineering team, and each one undergoes thorough review and security evaluation to ensure safe operation.

Safety filters and guardrails

Robin includes multiple layers of real-time protection that put the operational monitoring expectations of ISO 42001 into practice. Microsoft Prompt Shield is the primary filter, blocking abuse, malicious activity, and harmful content before it reaches the AI model. Adding a further layer of governed oversight, a separate AI-as-a-judge mechanism, an independent AI model with no stake in the conversation, reviews Robin’s outputs to ensure they align with expected behavior. These layers are always on and cannot be disabled, ensuring interactions stay compliant and professional.

Full data isolation

Upholding the data management principles of ISO 42001, each customer’s knowledge base, scripts, logs, and configurations are logically isolated within Azure, ensuring no cross-tenant data access. For MSPs, data is also segmented per end-customer, keeping every environment’s boundaries intact.

Full audit logging and technician identity

Consistent with the logging and accountability principles of ISO 42001, every action taken by Robin is recorded in Atera’s Audit Log, just like those performed by human technicians. Each log entry clearly identifies “Robin” as the executing entity, leaving no ambiguity about who or what performed the task. This transparency lets administrators track every change, action, or response generated by the AI agent, holding agent activity to the same rigorous standards of traceability and accountability as any human user.

Conversation and decision logging

Extending those same transparency principles of ISO 42001, every interaction between end users and Robin is automatically logged as a ticket in Atera, with all AI decisions recorded as internal comments within the same ticket. These comments are visible only to technicians and admins, giving clear insight into the AI’s reasoning and behavior so IT teams can review context at any time and maintain full oversight and confidence in the agent’s actions.

Admin-governed autonomy

Putting the responsible-use principles of ISO 42001 into practice, Robin’s behavior is governed by custom instructions, playbooks, and knowledge base articles written by IT administrators in plain language that define the agent’s scope, approval flows, escalation criteria, and guardrails. Robin follows these instructions just like a new technician following your runbook, with all AI operations restricted to predefined IT support boundaries and anything outside that scope escalated rather than acted upon.

Optional AI recommendations

In keeping with the human-oversight principles of ISO 42001, AI generated content such as knowledge base articles and script suggestions is always optional and requires manual human admin approval before it is published or executed. No outputs are ever implemented without review.

Principle	What it means for you	Default behavior
Privacy-respecting AI	Your information is not used to train external or internal models	Enforced
Admin-governed autonomy	Control Robin behavior via Custom Instructions	Fully configurable
Risk-rated action control	Actions are risk evaluated before allowed to operate in your environment	Max risk level 2 by default
Password reset with 2FA	SMS verification before execution	Enabled
Optional AI recommendations	Optional and reviewed before use	Off by default
Harmful content filtering	Filters block non-IT and harmful inputs	Always on
Tenant/customer data isolation	Segregated databases per tenant/customer	Always enforced
Ethical AI commitment	Built on Microsoft Responsible AI standards	Enforced
Built on Microsoft Responsible AI standards	All actions logged as ‘Robin’ technician	Always on
Conversation and decision logging	All user-AI chats and reasoning logged as tickets/comments	Always on