Security at Adwix Atlas

Every agency’s data lives behind database-level row-level security— isolation is enforced by the database itself on every table, on every query, not just by application code. One agency can never read another agency’s leads, customers, bookings or invoices.

Accounts support two-factor authentication (TOTP) with authenticator apps. Team members get role-based access (owner / manager / agent), owners can deactivate members instantly, and login events are recorded. Public share links (invoices, proposals, vouchers) use long unguessable tokens and expose only customer-facing fields.

All traffic is encrypted in transit with TLS (HTTPS), and data is encrypted at rest by our managed database infrastructure. Hardened HTTP security headers are applied across the app.

Uploaded files — passport and ID scans, tickets, vouchers and other trip documents — are stored scoped to your workspace, and public links (such as a traveller’s trip portal) resolve only from long, unguessable tokens that expose just the intended documents. API keys are stored in hashed form, never shown again after creation, and can be revoked instantly. Outbound webhooks send only to the endpoints you configure.

You decide what to store in Adwix Atlas. We give you the fields and storage to run a travel business — including sensitive details like passports and government IDs — but you remain the controller of that data: store only what you need, and you can delete records and documents at any time. See our Privacy Policy.

Subscription payments are processed by Razorpay, a PCI-DSS compliant processor. Card and UPI credentials never touch our servers — we store only transaction metadata (amount, status, reference).

Data lives in a managed PostgreSQL cluster with automated daily backups and point-in-time recovery capability, hosted in the Mumbai region for Indian customers. Errors are monitored continuously, and platform health is public at adwixatlas.com/status.

You can export your data (CSV exports across leads, bookings, invoices, payments and GST) at any time, and request full workspace deletion from Settings — see our data deletion policy and privacy policy.

Found something? We want to know. Write to support@adwixatlas.com with the details and we’ll respond promptly. Please practice responsible disclosure — don’t access data that isn’t yours.