privacy policy
Velum — PII Protection & DLP for Jira & Confluence · last updated 14 July 2026
vendor: su.engineering · contact: support@su.engineering
summary
Velum finds and remediates personal and sensitive data in Jira and Confluence. It runs entirely on Atlassian Forge. Your content is processed inside your own Atlassian environment and is never sent to us or to any third-party AI service. We (the vendor) operate no server that receives your data.
what the app accesses
With the permissions you grant at install, Velum reads:
- Jira issue summaries, descriptions, and comments (
read:jira-work) - Confluence page titles and bodies (
read:page:confluence,read:confluence-content.summary) - Text extracted from PDF and text-based attachments on the above (scanned in-instance)
It writes only when you or your policy explicitly remediate:
- Jira issue fields and labels (
write:jira-work) - Confluence page bodies (
write:page:confluence)
what is processed, and where
Detection runs in-Forge (Atlassian's sandboxed runtime). Text is scanned by a regular-expression engine and an on-device NER model executing inside the Forge function. Your content does not leave your Atlassian instance for detection. Reversible tokenization replaces detected values with opaque ⟦TYPE_N⟧ tokens; the reversal key is stored encrypted (see below).
what is stored (in Atlassian Forge storage, inside your instance)
| Data | Store | Protection |
|---|---|---|
| Findings (type, location, detected value, severity, status) | Forge KVS (encrypted) | Platform-encrypted at rest; access is Jira-admin gated |
| Reversal mappings (token ↔ original value) | Forge KVS (encrypted) | App-layer AES-256-GCM over platform encryption; de-anonymization is Jira-admin gated |
| Masked (tokenized) content copies | Forge KVS | No PII (tokens only) |
| Audit log (who / what / when) | Forge KVS | No PII surfaces stored |
| Policy settings | Forge KVS | No PII |
All app data is deleted when you uninstall the app.
network egress (disclosed)
huggingface.co, us.aws.cdn.hf.co) at runtime. This is inbound data only: a public, static model file, comparable to a software dependency. No customer content is included in these requests. No other egress occurs; it is declared in the app manifest.data sharing
None. We do not receive, store, sell, or share your data. There are no analytics or tracking calls to the vendor.
sub-processors
- Atlassian: hosts the app and its storage (Forge platform).
- Hugging Face: serves the static AI model file (inbound only; no customer data).
your rights (GDPR / data subject requests)
Velum includes a Subject Erasure (Article 17) tool: search for a subject by name or email, locate all matching PII across Jira and Confluence, and remediate, producing an audit-ready PDF report. Because all data lives in your Atlassian instance, you remain the data controller.