Home/Atlassian Marketplace/Mind Map Studio

Mind Map Studio

Jira & ConfluenceForge Native

Keyboard-first visual workspace for agile backlog decomposition

forumDiscord menu_bookGuides shopping_cartTry it freeopen_in_new

Enterprise Cloud Security

Security Architecture & Data Residency

Engineered from the ground up on Atlassian Forge to guarantee zero external data retention and complete tenant isolation.

security

100% Forge-Native Isolation

Mind Map Studio runs exclusively inside Atlassian-managed serverless compute containers. No customer code or data passes through external third-party servers.

inventory_2

Zero Third-Party Storage

All mind map graph coordinates, node relationships, and ticket links are stored in Forge Entity Storage residing in your Atlassian Cloud tenant.

lock

TLS 1.3 & AES-256 Encryption

Data in transit is encrypted using TLS 1.3. Data at rest in Forge Entity Storage is encrypted with AES-256 keys managed by Atlassian.

verified_user

Granular OAuth 2.0 Scopes

We request only the minimum necessary Atlassian API permissions required to read and update issues explicitly placed on your canvases.

memoryTechnical Security Specifications

ZERO EGRESS

Hosting EnvironmentAtlassian Forge (AWS Serverless Micro-VMs)

Database StorageAtlassian Forge Entity Storage (Zero External DBs)

Encryption in TransitTLS 1.3 (Strict HTTPS only)

Encryption at RestAES-256 (Atlassian Cloud KMS)

Data ResidencyInherited automatically from your Atlassian Cloud Region

Compliance AlignmentGDPR, SOC 2 Type II (via Atlassian Platform)

securityDetailed Security Protocols

1. Architectural Isolation

Mind Map Studio operates strictly inside Atlassian Forge, Atlassian's next-generation serverless app platform. Code execution takes place inside secure AWS micro-VMs managed by Atlassian. No application secrets, customer Jira API tokens, or session keys are transmitted to external servers.

2. Data Residency & GDPR Compliance

Because all persistence utilizes Atlassian Forge Entity Storage, your mind maps automatically inherit the Data Residency settings of your Atlassian Cloud organization (including EU GDPR and US FedRAMP compliance zones).

3. Role-Based Access Control

Access to mind maps within Jira and Confluence is governed entirely by your existing Jira project permissions and Confluence space restrictions. Users cannot view or modify issues on the canvas that they do not have explicit permission to access in Jira.

4. Vulnerability Management & Auditing

getCodeLess implements automated dependency scanning, static code analysis (SAST), and continuous integration security checks for all Marketplace builds. Updates are reviewed against Atlassian Marketplace Automated Security Requirements.

support_agentNeed Custom Vendor Verification or SLA?

Reach our security and engineering desk for compliance reviews or signed DPAs.

rocket_launchOpen Support Desk