Security

Last updated: 19 October 2026

Architecture

• Runs on Atlassian. Release Notes Writer is a Forge app: its code, storage and logs are hosted and operated by Atlassian. We run no servers, databases or third-party services for the app.
• No data egress. The app declares no external network access, so it cannot send data outside Atlassian.
• Data residency. Stored settings follow the data residency location of your Atlassian site.
• Encryption. Data in transit and at rest is protected by Atlassian's platform controls.

Access control

• Least privilege. Read-only Jira access; Confluence access limited to spaces and pages. No admin scopes, no email addresses.
• Your permissions apply. Pages and the Rovo agent act as the person using them, so they never show or publish more than that person can see or edit.
• Admin-only settings. Templates and automatic publishing can only be changed by project admins; this is checked again on the server for every change.
• Automatic publishing runs as the app and always excludes work items that have a security level.
• No access by us. BW Haze staff cannot read your Jira or Confluence content.

Secure development

• All input from the browser and from the Rovo agent is validated on the server; content written to Confluence is escaped.
• Custom JQL filters are validated on their own before they are saved, so they cannot widen the query to other projects.
• Dependencies are kept up to date and checked for known vulnerabilities before each release.
• Every release is reviewed and tested on a separate development site before it reaches customers.

Incident response

If we learn of a security incident affecting the app, we will investigate immediately, fix the cause, and notify affected customers and Atlassian without undue delay, and in any case within 72 hours of confirming that customer data was affected.

Report a vulnerability

Please email contato@bwhaze.com with the subject "Security". We will acknowledge your report within 3 business days and keep you informed. Please do not access data that is not yours or disrupt the service while testing.