Trust Center

Legal, Privacy & Security · Arkidor for Confluence

This page links to the privacy, security, and compliance documentation for Arkidor for Confluence — the ArchiMate® modelling app distributed through the Atlassian Marketplace. It covers this app only; the standalone Arkidor web application at arkidor.io is a separate product with its own Trust Center.

• Privacy Policy

  What personal data the app processes, how error telemetry is handled (EU-region ingest; US processor under the EU-U.S. Data Privacy Framework plus Standard Contractual Clauses), and how data subjects exercise their rights.

• Security Policy

  Platform security (Runs on Atlassian / Forge), Knaap's app-layer controls, least-privilege scopes, error-telemetry safeguards, and the vulnerability disclosure contact (security@arkidor.io).

• Security Self-Assessment (CAIQ Lite v4.1.0 / CSA STAR Level 1)

  A completed response to the Cloud Security Alliance Consensus Assessment Initiative Questionnaire (CAIQ Lite v4.1.0) — all 138 questions across the 17 CSA domains, rendered in full on the page; many infrastructure controls are inherited from the Atlassian Forge platform (SOC 2 / ISO 27001). The CSA-native spreadsheet (.xlsx) is available as a secondary download from that page. This is a self-attestation, not independent assurance.

• Data Processing Agreement (GDPR Art. 28)

  The processor terms governing Knaap's processing of personal data on the customer's behalf. It applies automatically to use of the app — no separate signature is required.

• Sub-processors

  The current list of sub-processors (Atlassian, Sentry, AWS) with their roles and regions, and how a site administrator can disable the analytics/error-telemetry egress.

• Terms of Use / EULA

  The licence and terms governing use of the app, including its relationship to the Atlassian Marketplace terms, warranties, and limitation of liability.

• Support & SLA Policy

  Support channel and hours, response targets (initial response within 72 hours / 3 calendar days, including weekends and public holidays), and security-response targets. Availability is governed by Atlassian's Forge platform; targets are commercially reasonable efforts, not guarantees, and there are no service credits.

Contact

For privacy or data-protection questions: support@arkidor.io. For security disclosures: security@arkidor.io.

Knaap · Itäinentie 50 · 06100 Porvoo · Finland