Page tree

Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: Published by Scroll Versions from space TFAC and version Draft

...

Numbered Headings
start-numbering-ath3

Where is the app hosted? What options for Data Residency do we have?

The app is hosted in Amazon Web Services (AWS) in two regions:

  • US East (Nothern Virginia) region (us-east-1)
  • Europe (Frankfurt) region (eu-central-1)

The app's region is automatically set in accordance with the region of the parent product after installing (reinstalling) the app.

What data does the app store on its server?

Table Excerpt Include
nameData transfer on Cloud
merge-tablestrue
pagePrivacy and Data Collection Policy
typepage

What authentication options are available?

The app uses JWT authentication. JWT authentication is used for communication between the Atlassian host and the app server. Learn more  about Atlassian Connect security.

Does the app meet GDPR requirements?

We’re committed to helping our customers and users understand, and where applicable, comply with the General Data Protection Regulation (GDPR). For this purpose, we suggest signing a Data Processing Agreement (DPA). DPA is a contract between data controllers and data processors. The main purpose of a Data Processing Addendum (DPA) is to protect the user’s data in compliance with the GDPR or any other Privacy Laws.

To request and sign DPA please contact our support at servicedesk@stiltsoft.com or at the Service Desk Portal.

Does the app have fixed individual IP addresses to make outgoing connections to customer services and Atlassian products APIs?

Outgoing connections from the app to Atlassian APIs and from the Table from CSV and Table from JSON macros to customer servers are only ever originating from these IP addresses:

Confluence LocationOutgoing connections IPDomainAWS Region
Global and USA
  • 34.224.43.160
  • 54.235.153.229


stiltsoft.net

AWS US East (Nothern Virginia) Region
Europe
  • 3.78.200.64
  • 52.57.27.108
Europe (Frankfurt) Region

What scopes and endpoints does the app use?

Backend (the app server side)Frontend (the app client side)

ACT_AS_USER


This scope retrieves data from Confluence under user restrictions so that the user who requested the data will get only permitted data.


This scope is used in a few cases when a user interacts with the app and makes the data transfer through the app server:


Table Excerpt Include
isFirstTimeEntertrue
v2
nametransfer-cases
pagePrivacy and Data Collection Policy
transposeauto
typepage


Used endpoints:


GET /rest/api/content/${contentId}/history/${pageVersion}/macro/id/${macroId} (docs)

GET /rest/api/content (docs)

GET /rest/api/content/${contentId}/child/attachment?expand=children.attachment (docs)


READ


This scope is used to read the app system user ID and to read the app settings from its properties. 


Used endpoints:

GET /rest/api/user/${accountId}/property/${key} (docs)

GET /rest/api/user/${accountId}/property (docs)

GET /rest/api/user/current/ (docs


WRITE


This scope is used to write the app settings to the app system user properties. 


Used endpoints:


DELETE /rest/api/user/${accountId}/property/${CONFIGURATION_KEY} (docs)

POST /rest/api/user/${accountId}/property/${CONFIGURATION_KEY} (docs)

PUT /rest/api/user/${accountId}/property/${CONFIGURATION_KEY} (docs)

READ


This scope is used to read macro data, spreadsheet attachments, and metadata from the content and user properties.


Used endpoints:


GET /rest/api/search (docs)

GET /rest/api/content (docs)

GET /rest/api/content/search (docs)

GET /rest/api/content/${contentId} (docs)

GET /rest/api/content/${contentId}/child/page (docs)

GET /rest/api/content/${contentId}/descendant/page (docs)

GET /rest/api/content/${contentId}/version (docs)

GET /rest/api/content/${contentId}/history/${pageVersion}/macro/id/${macroId} (docs)

GET /rest/api/content/${contentId}/child/attachment (docs)

POST /rest/api/content/${contentId}/permission/check (docs)

POST /rest/api/contentbody/convert/export_view (docs)

POST /rest/api/contentbody/convert/async/export_view (docs)

GET /rest/api/contentbody/convert/async/${asyncId} (docs)

GET /rest/api/user (docs)

GET /rest/api/user/current (docs)

GET /rest/api/user/${userId}/property (docs)

GET /api/v2/attachments/${attachmentId}/properties (doc)

GET /api/v2/attachments/${attachmentId} (doc)

GET /api/v2/pages/${pageId}/attachments (doc)

GET /api/v2//blogposts/${blogpostId}/properties (doc)

GET /api/v2/blogposts/${blogpostId}/properties/${propertyId} (doc)

GET /api/v2//pages/${pageId}/properties (doc)

GET /api/v2/pages/${pageId}/properties/${propertyId} (doc)


WRITE


This scope is used to update macro parameters from the page view, store spreadsheet data as attachments on the page, and store metadata in the content and user properties.


Used endpoints:


PUT /rest/api/content/${contentId} (docs)

PUT /rest/api/content/${context.pageId}/child/attachment (docs)

POST /rest/api/template/page/${templateId}/instance (docs)

POST /rest/api/user/${userId}/property/${key} (docs)

POST /api/v2/attachments/${attachmentId}/properties (doc)

DELETE /api/v2/attachments/${attachmentId}/properties/${propertyId} (doc)

POST /api/v2/blogposts/${blogpostId}/properties (doc)

PUT /api/v2/blogposts/${blogpostId}/properties/${propertyId} (doc)

POST /api/v2/pages/${pageId}/properties (doc)

PUT /api/v2/pages/${pageId}/properties/${propertyId} (doc)


DELETE 


This scope is used to keep the last 10 versions and delete the rest of the older versions of the Spreadsheet attachment when the Retain all spreadsheet revisions option is disabled.


Used endpoints:


DELETE /rest/api/content/${attachmentId}/version/${version} (docs)

About Table Filter, Charts & Spreadsheets for Confluence Data Center (Server)

...