01 The default
Most apps ask you to send your data somewhere.
A typical Marketplace app runs on its vendor's own infrastructure. Installing it means your issues, your customer requests and your page content are copied to a company you have not met, on hosting you did not choose, alongside sub-processors you would have to read a policy to name. None of that is unusual. It is simply how most of the ecosystem is built, and it is why every install turns into a review.
The data that cannot leak is the data that was never sent anywhere.
02 The constraint
So nothing is sent.
Everything here runs on Atlassian Forge. Atlassian hosts the code, the data stays inside the tenancy you already administer, and the app declares no egress — there is no address for your content to travel to, including ours. That is not a policy we could quietly change. It is a property of where the software runs.
manifest.yml read by Atlassian before the app runs
-
read:servicedesk-requestRead the request the customer chose to repeat -
write:servicedesk-requestCreate the repeat, attributed to that customer -
storage:appHold the schedule, in storage Atlassian operates
External permissions
None declared
No fetch, no images, no scripts, no addresses of any kind. Forge blocks any outbound call an app has not declared, and this app declares none — so there is nowhere for your content to go, including to us.
03 What it produced
Two apps built under that rule.
Both are on the Atlassian Marketplace, and the permissions each one asks for are on its install screen before you approve anything.
Mermaid Studio for Confluence
Flowcharts, sequence diagrams, ERDs, Gantt charts and mind maps written as plain text — with syntax highlighting, live preview, starter templates and one-click export.
Recurring Requests for Jira Service Management
Let portal customers repeat a request they have already raised — once, on a schedule, or from a saved template. Off until an admin enables it, with limits they control.
04 The same idea, elsewhere
Aion — batch work for coding agents.
Not the work that pays the bills — it is the most technically ambitious thing here, and the source is public. The same instinct runs through it: Aion reads files and calls language models, and deliberately cannot run shell commands.
Describe the job once. Run it over everything.
An agent asked to review forty files reads them one at a time, filling the conversation with material nobody will read and billing every file to an expensive model. Aion takes the mechanical part: one call per file, run at once, merged into a single answer. Across nine real jobs it kept 64.7% of what was produced out of the conversation.
Then the harder question, and the one most tools never ask: will an agent actually reach for it? A benchmark harness was built to find out, and the first answer was unflattering.
Source on GitHubDoes the agent actually reach for it?
Eighteen scenarios. Zero false positives — never reached for where it should not have been.
One forty-file review. 98.6% of what it produced never entered the context window — 64.7% aggregate across nine jobs.
05 Check it yourself
None of this needs to be taken on trust.
A promise not to misuse your data is worth less than not being able to reach it. Each of these is visible to you without our cooperation.
Hosting
Atlassian Forge. We operate no servers and hold no infrastructure of our own.
Egress
None declared. Nothing is sent outside Atlassian, to us or to anyone else.
Permissions
Listed on each app's page and on the install screen before you approve it.
Telemetry
None. No analytics, no tracking and no cookies — including on this site.