Security

Zeitdocs builds Atlassian Marketplace apps with security and data minimisation as core design principles.

Built on Atlassian Forge

Zeitdocs apps are built and hosted entirely on Atlassian Forge.

  • App execution is hosted by Atlassian.
  • Authentication is managed through Atlassian.
  • App data is stored within Atlassian products and Forge-hosted storage.
  • No external application servers, databases or storage systems are used.
  • No Forge Remotes or external data-processing services are used.
  • No App data is transferred outside Atlassian.

Data Protection

Zeitdocs only accesses the data and permissions required to provide each App’s documented functionality.

Zeitdocs does not:

  • sell, rent or share customer data;
  • use customer data for advertising or marketing;
  • create user profiles;
  • use external analytics or telemetry services;
  • use customer data to train artificial intelligence models;
  • create external copies or backups of App data.

Data retention, deletion, backup and data residency follow the applicable Atlassian and Atlassian Forge policies.

Application Security

Zeitdocs follows Atlassian’s security requirements for Marketplace Cloud apps.

Our security practices include:

  • requesting only the Atlassian permissions required by each feature;
  • using Atlassian-provided authentication and storage;
  • separating data between Atlassian sites;
  • avoiding unnecessary collection and logging of personal data;
  • reviewing dependencies and addressing known vulnerabilities;
  • protecting credentials and secrets;
  • reviewing security implications when App functionality changes.

Shared Responsibility

Atlassian is responsible for the security and operation of the Forge platform and its hosted infrastructure.

Zeitdocs is responsible for the security of its App code, requested permissions, configuration and data-handling logic.

Customers are responsible for managing their Atlassian users, permissions, sharing settings and App configuration.

Vulnerability Management

Zeitdocs investigates reported security vulnerabilities and applies fixes based on their severity and the timelines required by Atlassian Marketplace policies.

Reporting a Security Issue

Potential security vulnerabilities can be reported through:

Email: support@zeitdocs.com
Support portal: https://zeitdocs.atlassian.net/servicedesk/customer/portal/1

Please include:

  • the affected App;
  • a description of the issue;
  • steps to reproduce it;
  • its potential impact;
  • any relevant screenshots or technical information.