Where your data goes: nowhere.
This page is written to be sent to a security team as-is. Every statement below is verifiable in the app manifest.
Where does my data go?
Nowhere. The app is a native Forge app; computation and storage stay on Atlassian’s infrastructure, inside the customer’s own cloud tenancy. There is no copy of your configuration on any system we operate, because we operate none.
What data do you read?
Configuration metadata: fields, screens, schemes, workflows and projects. We do not read issue content, attachments or comments.
Do you have external servers?
No. Zero egress, verifiable by the customer in the app manifest and in the absence of declared external permissions.
Who can see it?
Nobody outside the customer instance. We have no access to any customer’s data.
Subprocessors
None.
Vulnerability disclosure
Report to security@freeboardsoftware.com. We acknowledge within 24 hours, including on weekends. No retaliation against anyone reporting in good faith.
- Security contact
- security@freeboardsoftware.com
- Acknowledgement
- ≤ 24 h, 7 days a week
- Subprocessors
- none
- Data residency
- Atlassian cloud only