Security Policy — Glanceable Boards for Jira

Effective date: 30 September 2026

Last updated: 30 September 2026

Glanceable Boards ("the App") is an Atlassian Forge application published by Softwired Digital Pty Ltd (Brisbane, QLD, Australia). This policy describes Softwired's security practices for the App. It is distinct from our Privacy Policy, which covers personal data and privacy practices.

1. The short version

The App runs entirely on Atlassian Forge inside your Atlassian Cloud tenant. Board settings live in Forge storage. Optional board background images live in Forge Object Store. Softwired operates no servers for this App, copies nothing to Softwired infrastructure, and the App makes no network calls outside your own tenant.

2. Architecture and data handling

Glanceable Boards is a Forge app. In normal operation:

Board settings (name, JQL scope, lists, colours, theme, field visibility, templates, and related configuration) are stored in Atlassian Forge key-value storage, scoped to your Jira instance.
Optional board background images are stored in Atlassian Forge Object Store. Uploads go from the browser to Atlassian over a pre-signed URL; Softwired server-side code never touches the file bytes.
Per-card board state (list membership, covers, checklists, archive flags) is written as Jira issue properties on your own issues inside your Jira.
Nothing is copied to Softwired servers. Softwired does not host App data for customers.
The App's manifest declares no external domains and no external egress, so it makes no network call outside your tenant's Atlassian APIs.

3. Encryption and platform security

Data in transit uses TLS. Data at rest is encrypted by Atlassian Cloud. Tenant isolation is enforced by the Forge platform. Softwired relies on Atlassian's cloud security controls for the infrastructure that stores and serves App data. Atlassian's security documentation applies to the platform: https://www.atlassian.com/trust/security.

4. Access control

Every API call runs through Forge authentication as the signed-in user. Jira's own project permissions decide what appears on a board. The App cannot show anyone an issue that Jira would hide from them. Softwired staff do not have access to customer App storage or Jira data through Softwired-operated systems, because Softwired does not operate such systems for this App.

5. Vulnerability management and disclosure

Softwired takes security reports seriously. If you believe you have found a vulnerability in Glanceable Boards or another Softwired Forge app:

Email help@softwired.com.au with a clear description, steps to reproduce where possible, and any relevant impact.
Please do not publicly disclose the issue until we have had a reasonable chance to investigate and remediate.
We aim to acknowledge reports within 7 business days and to keep you informed of progress.

We review App dependencies and Forge platform guidance as part of ongoing maintenance, and we ship fixes through Atlassian Marketplace updates when needed.

6. Softwired organisational controls

Softwired Digital Pty Ltd is a small Brisbane consultancy. We do not claim SOC 2, ISO 27001 or similar certifications for Softwired as an organisation. For Glanceable Boards, the security-relevant controls are those of Atlassian Forge and Atlassian Cloud (where App data lives), plus Softwired's practices for source control, Marketplace publishing, and support access to our own accounts.

7. Support and security contact

Security and support enquiries: help@softwired.com.au

Softwired Digital Pty Ltd · Phone: (07) 2140 7624 · Brisbane, QLD, Australia

8. Changes

We may update this policy to reflect changes in the App or our practices. The "last updated" date above changes with it; material changes may also be noted on the Atlassian Marketplace listing.