Security and privacy

An approval is only worth something if you can show it was genuine, that it applied to the version people actually read, and that the record has not been quietly changed since.

#Everything in this section

Sign approvals with a codeRequire a code from an authenticator app before anyone can approve, so a sign-off is genuinely theirs.What is recordedThe evidence Capable keeps for every approval, and how to get it out when an auditor asks.Who can see whatWhat signed-out readers, guests and restricted-page viewers can see of an approval.

#The short answers

Question	Answer
Where is approval data stored?	In your own Confluence site, on the page it belongs to. It does not leave your Atlassian tenant.
Can someone approve a page they cannot see?	No. Every action is checked against your Confluence permissions.
Can an administrator approve on someone's behalf?	No. Only people on the reviewer list can respond. See Who can do what.
Can an AI assistant approve for me?	No. Assistants can look approvals up and raise them, never answer them. See Rovo and AI assistants.
Can a logged-out reader see the approval?	They can see the status. They never see the event history.

#Working to a standard

If you need to map this to SOC 2, ISO 9001, ISO 27001 or FDA 21 CFR Part 11, Compliance sets out what Capable covers and, just as importantly, what it does not.