White Paper
MongoDB Atlas Security Controls
This white paper provides a detailed overview of MongoDB Atlas security, privacy, resilience, and compliance controls. It covers federated and database authentication, MFA, x.509, AWS IAM and LDAP integration, auditing, encryption in transit and at rest, customer-managed keys, Client-Side Field Level Encryption, Queryable Encryption, data sovereignty, network security, private endpoints, backups, incident response, and disaster recovery. Atlas uses strong defaults including always-on authentication, authorization, encryption, and restricted internet access. The document also describes compliance certifications and government requirements, privileged-access controls, vulnerability management, secure software development, patching, and security monitoring. Responsibility remains shared, with
