Multi-Tenancy at Atlatos

Atlatos GmbH offers its SaaS solution with comprehensive, software-based multi-tenancy designed specifically for corporate clients with complex organizational structures.
The focus is on the strict separation of data, access rights, and business processes at the tenant level.

Technical Implementation of Multi-Tenancy

Dedicated Data Storage

• Atlatos stores all customer data in dedicated databases, separate from third-party clouds.

• Data is hosted exclusively in certified data centers in Germany (Cologne, Düsseldorf).

Multi-Layer Application Architecture

• The modern, cloud-based multi-layer architecture ensures high scalability, availability, and security.

• Within one company, multiple subsidiaries can be set up and managed as independent organizational units.

Subsidiary Autonomy – With Current Limitations

A customer can create any number of subsidiaries or organizational units within their tenant.
These can operate autonomously in key operational areas, especially regarding:

• Role and permission management

• Travel policies and approval workflows

• Chart of accounts and selection of cost centers or other accounting elements

• Export files for subsidiaries

Note on Current System Architecture:
Some core system components are currently configured uniformly per customer system, including:

• The assigned travel agency (partner structure)

• Content sources such as hotel and flight integrations

• Corporate design (e.g., email templates, UI color scheme)

These elements are presently shared across all tenants within a customer account.
Further flexibility in these areas is planned and will be developed step-by-step.

Data Protection & Security

Data Separation and Access Control

• Logical separation of data between organizational units is fully ensured.

• Access is always role-based and follows the principle of least privilege.

GDPR-Compliant & Certified

• Atlatos meets all requirements under Art. 32 EU-GDPR, including documented technical and organizational measures in line with ISO/IEC 27001.

• Implementation is regularly validated through audits.