Data Security & Privacy

Mail Page for Confluence Cloud is now “Page Beam”.

Where is my data stored?

Your data is stored securely only in the Atlassian cloud infrastructure!

Page Beam for Atlassian Confluence Cloud was developed using the Atlassian's most recent development platform called Atlassian Forge and thus meets the highest standards of security and availability.

In the Page Beam App all your data is stored securely only in the Atlassian cloud infrastructure with the Atlassian Storage API.

In comparison, other Confluence app vendors still use the previous Atlassian Connect development environment, where the app is not run in the Atlassian infrastructure but in a third-party cloud infrastructure and thus data is also stored outside of Atlassian.

 

Screenshot 2024-09-22 at 16.27.03.png
Atlassian Forge vs Atlassian Connect

What data is stored?

The following data is stored in the Page Beam App.

Data type

Data fields

Secret1

Data type

Data fields

Secret1

Mail settings

mail sender name, address, subject prefix

Mail layout settings

image scaling options, mail header text, button label, custom css

General settings

groups, that are allowed to use Page Beam (permissions)

Mailserver account data

server hostname, port, username and password

1 All secrets were securely stored using the API Storage setSecret method.

What data is logged? Do you track me?

We only log errors and API calls always without any user data.

We never log your ip address. We don’t track you. We don’t know, who use our Page Beam App. You are anonymous.

It is planned in a later version that you as an administrator can activate a temporary debug logging in the Page Beam admin area, so that we can help you better in case of errors. So you remain at any time in control of what logging data is generated.

What Confluence data does Page Beam access?

The following read permissions to Confluence data are required for Page Beam functionality.

Access mode

Access right

Data fields

Access mode

Access right

Data fields

view

confluence-content.summary,
confluence-groups
confluence-space.summary,
confluence-user,


  • Confluence page title and content.

  • Confluence groups to set permission to use Page Beam in space and global settings

  • Space Permissions for logged-in user

  • Display name and email address of users, which we want to send emails.

view

content.metadata:confluence

  • Confluence content metadata for converting content body in Page Beam, to extract excerpt macros in content body.

readonly

content.attachment

  • All attachments of the page, if you select this in the send dialog of Page Beam.

search

confluence

  • Search for Confluence users by name for selecting recipients (to, cc, bcc) of the mail.

view

me

  • Display name and email address of the currently logged-in user, who wants to send the mail with Page Beam.

When Page Beam is used for the first time, Atlassian informs about the required access rights, see the following screenshot.

pagebeam-consent.png

Does Page Beam connect to external services?

For sending the mail it is technically necessary to send data to our cloud service. All data is encrypted in transit and data is only volatile in memory and is never saved on storage.

To ensure high security in the Atlassian Forge infrastructure, network functions are technically restricted in the infrastructure.

Unfortunately, it is therefore not possible to send custom mails within the Atlassian Cloud infrastructure at the moment. For this reason, it is necessary that Page Beam uses our external cloud service under the domain *.elliptic-bytes.seibert.group as a proxy for sending the mail to the configured mail server.

All data is encrypted in transit and is held only in memory while sending the mail. It is also ensured that the logging of the cloud service does not contain any user data.

Optional: Using our Mail Server at IONOS SE

If you do not have your own mail server for sending mails, you can configure Page Beam to send mails via our mail server at IONOS Group SE in Germany:

Home | IONOS Group SE

IONOS Group SE
Elgendorfer Straße 57
56410 Montabaur

Here you can see the certificates of IONOS:Zertifikate | ISO, SLAs uvm. | IONOS Cloud
Such as the ISO 27001 for IT security: ISO 27001 PDF

The mails are sent from the domain @mailpage.app and the following mail servers are used for this service:

  • mx00.ionos.de (IP address: 212.227.15.41)

  • mx01.ionos.de (IP address: 217.72.192.67)

The IONOS Mail services are configured so that no mails are saved permanently. Also incoming mails to the mailbox are deleted immediately.

Which data is transmitted?

The following data is transmitted to our cloud service, when you send a Confluence page as mail:

Data type

Data fields

Data type

Data fields

Mail header data

from, to, cc, bcc, subject field

Mailserver account data

server hostname, port, username and password

Confluence page

Page title and page content.
All attachments of the page, if you select this when sending.
URL to Confluence page.

Confluence instance

Site URL of your confluence instance

User data

Display name and email address of the user, who sends the mail.

Again, all data is encrypted in transit, held only volatile in memory and is never saved on storage of our cloud service!

Information security guideline

This page contains specific information about the Page Beam App.

Furthermore here you can find our general Information security guideline