EvolRed

Trust Center for Jira Apps

Privacy, security and compliance for EvolRed's Jira apps on the Atlassian Marketplace. Last updated 15 October 2026

Short version

  • Built on Atlassian Forge.Every EvolRed Jira app runs inside Atlassian's own cloud, in a sandbox Atlassian operates and secures.
  • Your data stays inside Atlassian. Nothing is sent to EvolRed servers or to any third party. We have no copy of your data.
  • No tracking. No analytics, advertising, cookies or external APIs inside our apps.

This page covers our Jira apps on the Atlassian Marketplace. For how we handle data on this website, see our website privacy policy.

Where your data lives

  • All processing and storage happen in Atlassian's Forge infrastructure (AWS regions managed by Atlassian). App data is kept in Forge storage, scoped to your Atlassian Cloud site.
  • Our apps make no outbound calls to EvolRed or third-party services. Where an app writes back to your site (for example a Jira comment, a notification or a Confluence page), it uses Atlassian's own APIs.
  • Issue Templates includes an optional Rovo agent. Rovo is provided by Atlassian and runs within Atlassian's AI infrastructure.
  • When you uninstall an app, Atlassian permanently deletes its Forge storage. EvolRed keeps no copies.

Security

  • Sandboxed execution: Forge apps run isolated from the network, the file system and other apps.
  • Minimum permissions: each app requests only the scopes it needs, and you can review them before you install.
  • Encryption: Forge storage is encrypted at rest and in transit by Atlassian.
  • Secure development: TypeScript strict mode, input validation at every resolver, no personal data in production logs, no secrets in code, and regular dependency audits.

Privacy and compliance

  • GDPR and UK GDPR:our apps implement Atlassian's personal data hooks, so access and deletion requests made through Atlassian are handled automatically. Other requests: [email protected], answered within 30 days.
  • CCPA/CPRA: we do not sell personal information.
  • Data breaches: where GDPR requires it, we notify the supervisory authority within 72 hours and affected users without undue delay, working alongside Atlassian.
  • Certifications:EvolRed does not hold its own SOC 2 or ISO certification. Our apps run on Atlassian's infrastructure, which is covered by Atlassian's certifications (see the links below).

Atlassian platform resources

Policies for each Jira app

Each app has its own privacy policy, terms and support page, with the exact data it stores. Service levels are on our Support & SLA page.

Contact

Privacy questions: [email protected]. To report a security issue, email [email protected]with "Security" in the subject line; we treat these as critical.