Soliman Apps

Security

Answers to the questions security and procurement teams usually ask about Askwise.

QuestionAnswer
HostingAtlassian Forge only ("Runs on Atlassian"). No servers or databases outside Atlassian.
Data leaving AtlassianNone. The app declares no outside network access (egress).
Where data is storedForge SQL inside your Atlassian site, plus one Confluence content item per question for search.
Data residencyFollows your Confluence site's location, as provided by Forge hosted storage.
Personal data storedAtlassian account IDs only. No names or email addresses.
Developer access to customer dataNone. We cannot read your questions or settings.
Access controlEvery request checks, on the server, that the person can view the question's space. Space rules (who can ask, answer, accept) and admin pages are also checked on the server.
Input handlingAll database queries use bound parameters. Text is limited in size, rich text is stored as Atlassian Document Format and shown with Atlassian's renderer. CSV exports neutralise spreadsheet formulas.
EncryptionHandled by Atlassian's platform for data in transit and at rest.
LoggingError logs in Atlassian's Forge logging contain no question content or personal data.
DeletionUsers delete their posts; space admins can delete any post in their space. On uninstall, Atlassian removes Forge storage per its data lifecycle rules.
BillingThrough the Atlassian Marketplace only. We never see payment details.
Vulnerability reportssupport@soliman-apps.com with "Security" in the subject.