Security

• Runs on Atlassian: no egress, no outside servers, data in Forge storage in your region.
• Least privilege: a restriction-only write scope. The app doesn't read page content, and it can't edit it.
• Every action checks, as you, that you're a Confluence admin before anything runs. If space admins are allowed, a space admin is checked as an admin of that space, and every page, rule, run and audit they name must be in it.
• Previews, typed confirms, a week of watching by default, and undo for every change.
• Logs hold ids and counts only.

Report a security issue to the security contact on the Support page.