Simplify

Privacy Policy for Secret Sentinel

Learn how Secret Sentinel protects your data and operates entirely within Atlassian infrastructure using Forge.

Data Storage and Processing

Secret Sentinel is built on the Atlassian Forge platform and is delivered as two separate Forge apps (one for Confluence and one for Jira).

We do not store or process customer data on external systems.

All content scanning, redaction, and automation occurs within Atlassian infrastructure.

Data Access and Sharing

We do not share customer data with third parties. No content is transmitted outside Atlassian services.

Data is accessed only as required to provide the app’s functionality and in accordance with Atlassian API policies.

Data Security Measures

Secret Sentinel follows Atlassian security best practices by design:

  • Runs fully on Atlassian Forge
  • Uses Atlassian-hosted storage (Forge KVS)
  • No external APIs or services
  • No environment variables or secrets

Persistent App Data

The app processes supported Jira and Confluence content in order to detect and redact credential patterns, but it does not persist a separate copy of that content. Forge KVS stores configuration, SHA-256 hashes and administrator labels for ignored values, and three maps of integer dashboard counters: by credential type, severity, and month. A detection increments the relevant numbers; the record contains no detected secret or matched hash, issue key, page ID, content excerpt, timestamp, or per-detection entry.

Atlassian Forge encrypts hosted storage on disk, scopes it per installation, and retains it for 28 days after uninstall under Atlassian’s documented storage lifecycle. That retention therefore applies to the settings, ignore-list hashes, and aggregate integers above—not to found secrets or copies of Jira and Confluence content. See the Secret Sentinel Trust Center for the full data inventory, scope table, sources, and explicit product limitations.

Updates to this Policy

This policy may be updated from time to time. Any changes will be published on this page.

By using Secret Sentinel, you agree to our End User License Agreement.

For more information about Atlassian’s privacy practices, see the Atlassian Privacy Policy.