Trust Center

Security & Compliance

Armada is built on Atlassian Forge, ensuring your data stays within Atlassian's trusted infrastructure. No external servers. No third-party access. Enterprise-grade security by design.

100% Forge-Native
0 External Servers
AES-256 Encryption
SOC 2 Certified

Built for Enterprise Trust

Forge-Native Security

Armada runs entirely within Atlassian's secure infrastructure. Your data never leaves Atlassian's cloud.

  • Sandboxed execution environment
  • No external servers or databases
  • Automatic security patches from Atlassian
  • Zero data egress to third parties

Data Protection

Enterprise-grade encryption and isolation protect your data at every layer.

  • AES-256 encryption at rest
  • TLS 1.2+ encryption in transit
  • Tenant-level data isolation
  • No cross-site data access

Compliance Ready

Inherit Atlassian's world-class compliance certifications automatically.

  • SOC 2 Type II certified
  • ISO 27001 compliant
  • GDPR compliant
  • Data residency support

Transparency

Clear documentation of what we access, why, and how your data is handled.

  • Minimal OAuth scopes
  • Published permission rationale
  • Audit trail for all actions
  • Open vulnerability disclosure

Compliance & Certifications

As a Forge app, Armada operates within Atlassian's compliance framework and inherits their certifications.

SOC 2 Type II

Covered under Atlassian's certification

ISO 27001

Operates within certified ISMS

GDPR

Full compliance with EU regulations

Cloud Security

Atlassian Cloud infrastructure

Permission Transparency

Armada follows the principle of least privilege. Here's exactly what we request and why.

read:jira-work

Read issue and project data to display campaign status and validate fleet health

write:jira-work

Create child issues, add comments for nudges, and update issue links

read:jira-user

Search users for assignee autocomplete and resolve display names

storage:app

Store campaign configuration, fleet data, and audit logs within Forge Storage

Data Flow Architecture

Your Users
Jira Cloud
Armada on Forge

All data stays within Atlassian's infrastructure. No external servers, no third-party APIs, no data egress.

System Status

Checking status...

Armada runs on Atlassian Forge infrastructure. For platform status, visit the Atlassian Status Page

Security Contact

Vulnerability Disclosure

Found a security issue? Report it responsibly.

[email protected]

Security Questions

Questions about our security practices?

[email protected]

Compliance Inquiries

Need compliance documentation?

[email protected]