Who is responsible for security and other hosting aspects of On-Premises solution?

On-Premises implies that you as client/customer are hosting the Thrinacia Atlas application in your own data centers or elsewhere such as Google GCE or Amazon AWS that we do not control in any way.

With this in mind, you would be responsible for your own physical data center security and also implementing proper server and other security management practices such as server firewalls, storage encryption, intrusion detection systems and so on as needed. Thrinacia Atlas is already PCI compliant software as it uses Stripe Elements or Credit Card tokenization with SSL encryption layer.

If you require proper audit reports such as SOC1, SOC2 and so on, you should likely seek those from your data center or your hosting provider as this is not something we could provide since we are not hosting your application.