Evidence. Decisions. Capital.
FAQ
Clear answers about the product, access, security controls and alpha release status.
What is Athar?
Athar helps asset owners decide what deserves the next investment: Evidence → Risk → Value → Action → Capital. Demonstration portfolios use invented assets and labelled, illustrative decision assumptions; their recommendations are not approved decisions.
Who can sign in?
Approved users sign in with Google through Google Identity Platform. The server checks the verified email against the application allowlist before creating a session. A Google account alone does not grant access.
Which security controls are deployed, and which are planned?
Deployed today: Google sign-in through Google Identity Platform, with a server-side application allowlist; Identity Platform self-sign-up is enabled in the recorded demo-onboarding baseline and must be reviewed before a client release; self-service account deletion is disabled; a server-side allowlist checked before a session is created; signed session cookies with HttpOnly, Secure and SameSite=Lax flags, verified with a revocation check on each protected request; same-origin checks on protected write routes; and private, no-store caching and anti-framing headers on protected pages. Planned, not yet active: multi-factor authentication, tenant-scoped client storage with an audit trail, and session verification inside the separate Athar API. These are product controls, not a certification claim.
Where is the alpha hosted?
The current alpha runs on Google Cloud Run in us-central1 in the United States. Public traffic to atharbio.ai passes through Cloudflare's network before it reaches Google Cloud. Saudi hosting is planned and is not active. Institutional data residency needs agreement before real data is accepted.
Can I upload confidential research or real assets?
Not in the current illustrative alpha. Client storage, organization memberships, the API identity boundary and cross-tenant acceptance remain a separate release. Use the access form for business contact details only.
Are tenant isolation and audit history live?
The current workspace is a shared illustrative portfolio. Tenant-scoped storage and audit controls are implemented in a pending release candidate, but are not a live capability until the required provisioning, deployments and acceptance tests are complete.
Does AI calculate or change the valuation?
Financial values come from the deterministic engine. AI narration is constrained to the supplied asset context and checked for evidence references and numeric grounding. Missing inputs are reported rather than filled with invented figures. Client patent-family data remains an open requirement for real-asset valuation.
Does Athar access live patent registries?
The alpha uses recorded or synthetic evidence. It does not represent a live PatSnap or patent-registry lookup. Source identifiers and provenance are kept alongside the displayed evidence.
Are SOC 2, ISO 27001 or HIPAA badges claimed?
No Athar certification or HIPAA compliance claim is made. Google Cloud hosting does not itself certify Athar or its deployment. Any future compliance statement must be supported by an applicable, verified assessment and contractual scope.
How do language and source references work?
Choose English or Arabic using the language control. Arabic layouts read right to left. Financial figures, asset identifiers, evidence references and source names retain their original values. Source quotations may remain in their original language so the record can be inspected.
How do I recover access?
Google account recovery and your Google Workspace administrator handle Google credentials. Athar email/password sign-in and password reset stay disabled unless separately approved and configured. Use Request access for institutional account questions.
Still have a question?
Request access to speak with the team.
Request access