Keystone Apps
Keystone Apps

Security

We follow Atlassian Forge best practices and least-privilege scopes.

Platform

  • Atlassian Forge hosting with platform-managed encryption at rest.
  • Scoped OAuth permissions (only what the app needs).

Operational

  • Continuous updates, minimal data retention, and logging of errors only.
  • Security updates prioritized as critical fixes.