Security Policy

Effective date: 19 September 2026

This page describes how Resident Translator for Confluence, provided by SKRD LLC, protects your data and how to report a security issue. For what data the app processes and how long it is kept, see the Privacy Policy.

Architecture

• The app is built on Atlassian Forge and runs entirely on Atlassian's infrastructure. It qualifies for Atlassian's Runs on Atlassian program: it makes no calls to servers outside Atlassian and exposes no web endpoints.
• Translation is performed by language models that Atlassian hosts for Forge apps (Forge LLMs). No external translation or AI service is used.
• SKRD operates no servers, databases or accounts that receive your content.

Access control

• The app reads and creates pages as the person using it, through the Confluence API. It cannot read or change anything that person cannot.
• The app only updates translated pages it created itself and never overwrites other pages.
• The site glossary can be saved only by Confluence administrators, and a space glossary only by administrators of that space. These permissions are checked on the server for every save.
• The app requests only the Confluence permissions it needs. Each one is explained in the app's Marketplace listing.
• The app does not use or store passwords, API tokens or other secrets.

Data protection

• App data is kept in Forge hosted storage, which Atlassian encrypts at rest. It is isolated per site and follows your site's data residency settings.
• Translation job data, including the parts of the page being translated, is deleted automatically after 7 days.
• Diagnostic logs contain only technical codes, never page content.
• SKRD staff have no access to your Confluence site.

Development

• Every automatic translation is checked before it is saved: page structure, protected elements such as code and macros, and link targets must match the original. A part that fails these checks is kept in the original language instead.
• Releases are deployed only through Atlassian's Forge platform.

Reporting a vulnerability

If you believe you have found a security issue in the app, email support@skrd.dev with the subject "Security". Please include steps to reproduce and do not access other customers' data. We will acknowledge your report, keep you informed and credit you if you wish.

Incidents

If we become aware of a security incident affecting customer data, we will notify affected customers without undue delay, using the contact details provided through Atlassian Marketplace.