Security and privacy
Most security questions about Capable have the same root answer: these are Atlassian Forge apps, and Forge constrains what an app can do in ways Atlassian enforces rather than we promise.
This section is the orientation. The precise answers for a given product live in that product's own security section.
#In this section
How Capable apps are builtEvery Capable app for Confluence runs on Atlassian Forge, which decides most of the answers a security review asks for.Reporting a security issueHow to report a suspected vulnerability, and what we do with it.Where our services runWhich parts of Capable run where, and how to remove the parts that leave your tenant.
#Related
The platform answers most of it.
