AuditPack for Jira Service Management privacy
This section describes how AuditPack for Jira Service Management handles data. It supplements the site-wide privacy policy.
Where the application runs
AuditPack is an Atlassian Forge application and runs on Atlassian (Runs on Atlassian). Atlassian hosts its code and processes its requests. Atesen Software operates no server or database for the application and has no access to customer data.
What it talks to
Only your Jira site. The application makes no external network calls. It has no Forge remote, no web triggers, no analytics, no telemetry and no externally hosted code or fonts; the PDF fonts ship inside the app. Every Jira read runs as the signed-in person, and the app never reads Jira with its own identity.
What it stores
The application stores nothing. It uses no Forge storage, no database, no cache, no scheduled jobs and no queues. It writes nothing to logs: it produces no console output at all.
How your data moves
- A Forge function reads the requested data from Jira as the signed-in person and holds it in memory only for the length of each request.
- The function returns it to your browser, which builds the PDF, CSV and ZIP files locally.
- Your browser saves the files to your device when you click download. Nothing is kept by the application afterwards, and closing the page discards the pack.
Personal data in a pack
- Atlassian account IDs and display names of the people in the status history, comments, approvals and attachments.
- Comment text, and issue summaries and descriptions.
- No e-mail addresses and no avatars.
- This data appears only in the files you download; the application does not keep it.
Retention and deletion
Because nothing is stored, there is no retention period and nothing to delete. The files you download are yours to protect and delete. Because nothing is stored, the application does not use the Forge Personal Data Reporting API. Uninstalling the application leaves no data behind.
Atlassian’s role
The application runs on Atlassian’s Forge platform. Atlassian hosts the code and processes the requests, and Atesen Software does not see or hold the data. Atlassian describes its role in the Forge data processing addendum.
Support correspondence
If you contact Atesen Software support by email, the message and attachments you choose to send leave Atlassian and are handled under the site-wide privacy policy. Do not send evidence packs, API tokens or customer personal data.