.png&w=64&q=75){kind=small}
Your content never leaves Atlassian.
All of our 8 apps run on Atlassian Forge with no egress. This page collects everything a security or procurement review needs in one place.
- Confluence & JiraYour pages, issues and permissions
- Yamuno appsRun on Atlassian Forge
- Forge storageMacro content and app settings
TLS 1.2+ in transit · AES-256 at rest · your existing Atlassian permissions apply
- Yamuno servers or databases
- None
- Calls out of Atlassian from the apps
- None, no egress declared
8 of 8 apps run on Forge with no egress. 0 servers of our own. Our CAIQ Lite answers 138 questions in full, none of them No.
How your data is protected
- Runs on Atlassian
- Every app runs on Atlassian Forge and declares no egress. Your content is processed and stored only inside Atlassian.
- Encrypted
- TLS 1.2+ in transit and AES-256 at rest, provided by Atlassian's infrastructure. We run no databases or servers of our own.
- No PII collected
- We do not log personal data or page content. Support only sees what you choose to send us.
- Your data residency
- App data follows the data residency region of your Atlassian Cloud site.
Documents
- Security PolicyArchitecture, secure development, vulnerability handling, incident response and disclosure.
- CAIQ Lite v4.1.0Our Cloud Security Alliance self-assessment, all 138 questions answered.
- Data Processing AgreementGDPR-ready DPA, including sub-processors and deletion terms.
- Privacy PolicyWhat we collect, why, how long we keep it and your rights.
- Terms of ServiceTerms for using yamuno.com and our services.
- EULALicence terms for Yamuno apps.
- System statusLive status, incident history and uptime. Subscribe for updates.
Compliance
Because our apps run entirely on Forge, customer data is hosted and protected by Atlassian under its own certifications, including SOC 2, ISO 27001 and GDPR commitments. See Atlassian's compliance programme.
Yamuno does not currently hold its own SOC 2 or ISO 27001 report. In its place we publish a complete CAIQ Lite self-assessment and sign our DPA on request, and we are happy to answer your own security questionnaire.
Sub-processors
The complete list. Changes are announced in our DPA with 14 days to object.
| Sub-processor | Purpose | Location |
|---|---|---|
| Atlassian Pty Ltd | App execution, data storage and all runtime processing (Forge) | Your Atlassian data residency region |
| Google LLC (Google Analytics) | Anonymised analytics on yamuno.com only, never inside the apps | United States |
Apps covered
- Markdown Importer for Confluence CloudRuns on Atlassian
- HTML Macro+ for ConfluenceRuns on Atlassian
- LaTeX Math for ConfluenceRuns on Atlassian
- PDF Exporter for ConfluenceRuns on Atlassian
- Markdown Exporter for ConfluenceRuns on Atlassian
- Charts - Reports and Graphs for Jira DashboardRuns on Atlassian
- Markdown Macro for ConfluenceRuns on Atlassian
- Advanced Attachment Manager for ConfluenceRuns on Atlassian
Talk to us
- Security reviews & questionnaires
- [email protected]
- Report a vulnerability
- [email protected]. We acknowledge reports within 48 hours. See security.txt.
- Product support
- Support portal or [email protected]