Security and privacy
Most security questions about Capable have the same root answer: these are Atlassian Forge apps, and Forge constrains what an app can do in ways Atlassian enforces rather than we promise.
This section is the orientation. The precise answers for a given product live in that product's own security section.
#In this section
How Capable apps are builtEvery Capable app for Confluence runs on Atlassian Forge, which decides most of the answers a security review asks for.Reporting a security issueHow to report a suspected vulnerability, and what we do with it.Where our services runWhich parts of Capable run where, and how to remove the parts that leave your tenant.Data residencyWhere Capable keeps the data it holds for your Confluence site, how the region is chosen, what moves when your site moves, and the limits that remain.Find your Capable data regionSee which region a Capable app keeps its data in, from the More details section of the About dialog.
#Related
The platform answers most of it.
