Security, privacy, and compliance information for every Agilva app on the Atlassian Marketplace. All apps run on Atlassian Forge — no external servers, no data egress.
Every Agilva app runs exclusively on Atlassian Forge. There are no Agilva-controlled servers, no external APIs, and no data egress of any kind. All compute happens inside Atlassian's platform.
Each app requests only the OAuth scopes strictly necessary for its function. We never request broad read/write permissions when a narrower scope suffices. Scopes are documented per product.
Agilva apps do not collect analytics, build user profiles, or track behaviour across sessions or tenants. We do not use third-party analytics SDKs inside any app.
All data stored via Forge Storage is encrypted at rest (AES-256) and in transit (TLS 1.2+) by Atlassian's platform. Agilva does not manage encryption keys — Atlassian does.
Forge apps automatically respect Atlassian's data residency controls. Any data stored by Agilva apps via Forge Storage resides within the same region as your Atlassian site.
Agilva is a certified Atlassian Marketplace partner and meets all requirements of the Marketplace Partner Agreement, including security, privacy policy publication, and vulnerability disclosure.
Stores only the dashboard gadget URL via storage:app inside Forge. No issue content, user data, or QR images are persisted anywhere.
QR codes are generated entirely in-browser from page URLs. No page content, metadata, or user information is persisted by the app.
Markdown rendering happens entirely within the Forge sandbox. No issue content is transmitted outside Atlassian's infrastructure at any point.
Issue link data is stored exclusively within Atlassian's Forge infrastructure. No link metadata, URLs, or user information is transmitted externally.
All issue discovery and search operations run within Atlassian's Forge platform. No query data, results, or user search history is persisted or transmitted externally.
All mathematical computations are performed client-side within the Forge sandbox. No formula inputs, results, or field values are persisted or transmitted outside Atlassian.