Network isolation and access
MongoDB Atlas users’ data and underlying systems are fully isolated from other users. Database resources are associated with a user group, which is contained in its own Virtual Private Cloud (VPC). Access must be granted by IP whitelisting or VPC Peering.
Encryption in flight and at rest
For MongoDB Atlas databases, all network traffic is encrypted using Transport Layer Security (TLS). Encryption for data at rest is automated using encrypted storage volumes. Users can bring their own encryption keys for an additional level of control.