Before you decide
What we have not finished yet.
Every product page you read is written by someone selling you something. This one runs the other direction: the gaps, the missing pieces, and the parts that make us look small, in one place you can link to.
Last reviewed July 27, 2026
This page exists because of when you find things out. A buyer who discovers these in week three feels misled, and is right to. A buyer who finds them here can decide with real information, before anyone has spent a month on a move-in that was never going to work.
So this is the canonical list. Each item says what is true today and what we are doing about it. None of them carries a date, because we would rather ship the fix than defend the estimate. When one of these stops being true, it comes off the list and the date above changes.
01
Notification email still sends from our address.
What is true today
On the Agency plan your portal already runs at your own domain, so a client who opens it sees your URL, your logo, and your colors. The email that tells them something is waiting still leaves from a Client Atrium sending address, with your agency name on it.
What we are doing about it
Per-agency sending domains are being built, which means DNS records you add once and mail that leaves as you. Until that ships, the envelope is ours. We are not putting a date on this page, because a date here reads as a promise and this one is not ready to be promised.
02
AI is switched on per account, not per feature in settings.
What is true today
All fourteen AI features ship off. When you want some of them on, you tell us which ones and we enable them for your account. There is no per-feature switch in your settings screen yet, so turning one off again is also an email.
What we are doing about it
The per-feature controls are being built, and the underlying flags already work that way, which is why enabling a single feature is possible at all. Until the screen exists, a person handles the request rather than a toggle.
03
Direct messages are not in the export.
What is true today
A workspace export gives you conversations as readable transcripts with the same records as structured data, every file with a manifest, signed documents as PDFs with their certificates and signature log, plus projects, decisions, people, and invoices. Direct messages and private channels the exporting admin cannot already open are excluded. Very large file libraries continue as download links in the manifest instead of bytes inside the zip.
What we are doing about it
The exclusion is deliberate rather than unfinished: an export should not hand an admin private messages they were never party to. What is unfinished is the other half, a way for a person to take their own direct messages with them. That is what we are working out.
04
We hold no SOC 2 or ISO 27001 certificate.
What is true today
Stated the same way on the security page: we do not hold a SOC 2 or ISO 27001 certificate today. Our infrastructure providers publish their own compliance documentation for the layers they operate, and that is a different thing from ours.
What we are doing about it
A formal audit of our own is on the roadmap as the customer base grows. It costs more than a company this size can carry today, and we would rather write that sentence than fill a page with badges that belong to our vendors. If your procurement process requires a certificate, we are not a fit yet, and you should know that before the first call.
05
We have no customers besides the agency that built it.
What is true today
RMH Websites, the founder’s own agency, runs its client work on Client Atrium every day and has for a while. That is the whole customer list. The customers page has one story on it, and the story is ours. There is no customer count on this site because there is no count worth publishing.
What we are doing about it
We are opening it to other agencies a few at a time, so each move-in gets real attention instead of a help article. When there are other customers, they will appear here and on the customers page, named, with their permission, and not before.
06
The company is one person.
What is true today
Ryan Huffman writes the code, answers the email, and sends the invoices. There is no support rota, no second engineer, and no account manager. You get fast answers from someone who knows the code, and you also get the risk that comes with that.
What we are doing about it
Two things exist so a one-person company is not a single point of failure for your client relationships. Export is one click, in formats that open without our software. And the source escrow commitment in the terms says that if Client Atrium ever permanently shuts down, customers in good standing receive a self-hostable build.
07
There is no public API and there are no webhooks.
What is true today
Nothing outside the product can read from it or be notified by it. If your agency wires its tools together, Client Atrium cannot be one of those tools yet.
What we are doing about it
Both are in development and will land on the Scale plan first. Until then, the export is the integration point: it is complete, it is one click, and it is structured data.
08
Scheduled backup into storage you own is not running.
What is true today
Export is on demand today. An admin clicks it and gets a zip. There is no nightly copy landing in a bucket or a drive that you control.
What we are doing about it
A scheduled export into storage you own is planned for the Agency plan and is not built. Our own encrypted backups of the database run on their own schedule, but those are ours, not a copy in your hands, and the distinction matters enough to say.
If something is missing from this list
Ask, and we will answer specifically and add it here if it belongs. Email hello@clientatrium.com, which the founder reads. The rest of what the product does is on how it works, and how data is handled is on security.
Decide with the whole picture.
Everything not on this page is running now. The free plan costs nothing to check, takes no card, and the export is one click if you decide against it.