Industry Leadership
Strategic Initiatives
CSA's strategic programs driving innovation in AI, cloud, and Zero Trust.
A public-interest 501(c)(3) dedicated to secure and trustworthy AI.




Industry Leadership
Strategic Initiatives
CSA's strategic programs driving innovation in AI, cloud, and Zero Trust.
A public-interest 501(c)(3) dedicated to secure and trustworthy AI.

CSAI FoundationChaptersEventsBlog
Share your insights on how organizations assess, monitor, and manage third-party risks. Take the short survey →

STAR Registry Listing for

AtenaHub

AtenaHub

AtenaHub (https://atenahub.app.br) is a web-based SaaS platform that lets organizations run online communities and learning: academic content and assignments, forum, events, exams, certificates, sales of access and public pages. Integrated apps: AtenaVault (Markdown notes), AtenaLibrary, AtenaPlayer, AtenaProof (RFC 3161 timestamp proof) and MyVault (private notes).

Scope of the CAIQ v4.1.0 self-assessment - The AtenaHub web application, its read-only API, the apps mounted on the same domain, and the operator's development and backup workstation. - Each organization is a logical tenant, separated in the application. - Out of scope: what runs only in the user's browser (personal OneDrive/Google Drive access) and third-party infrastructure.

Hosting and data - Shared hosting (HelioHost); production data located in the United States (Fremont, California). - Federated sign-in (Google, Microsoft); no passwords stored. Payments are handled by Mercado Pago (no card data in AtenaHub). - Self-service export of personal data and organization data in open formats (Markdown, JSON, ZIP).

Sole-operator service; self-assessment, not independently audited.

Offers an industry-accepted way to document what security controls exist in IaaS, PaaS, and SaaS services. It provides a set of Yes/No/NA questions and space to justify the response a cloud consumer and cloud auditor may wish to ask of a cloud provider to ascertain their compliance to the Cloud Controls Matrix (CCM).
Information about AtenaHub
Listed Since: 11/08/2026

STAR Level 1

Cloud Controls Matrix

CAIQ Self-assessment v4.1.0

Offers an industry-accepted way to document what security controls exist in IaaS, PaaS, and SaaS services. It provides a set of Yes/No/NA questions and space to justify the response a cloud consumer and cloud auditor may wish to ask of a cloud provider to ascertain their compliance to the Cloud Controls Matrix (CCM).

Created or renewed about 9 hours ago, on November 08, 2026.