Sub-processors
Effective date: 2026-09-10 · Last updated: 2026-10-13
Scope. This list applies to Arkidor for Confluence only — the Atlassian Forge app distributed through the Atlassian Marketplace. The standalone Arkidor web application at arkidor.io has a different set of sub-processors. It is referenced from our Privacy Policy.
Current sub-processors
| Sub-processor | Purpose | Data processed | Region | Transfer mechanism |
|---|---|---|---|---|
| Atlassian (Atlassian group entity per your contract) |
Forge platform hosting, app runtime, tenant/attachment storage, and Marketplace billing | Model attachments, page/space metadata, and account IDs — all held within your own Confluence tenant | Per your Atlassian data-residency configuration | Per your agreements with Atlassian |
| Functional Software, Inc. (Sentry) | Error monitoring and diagnostics | Cleaned technical error context (browser/OS, locale and time zone, truncated stack trace, page URL host and path, app version), and the IP address (transmitted with the request; not stored by Sentry). The report's page URL is reduced to its host and path (query string and hash removed); the browser's Referer value is not sent; URLs in navigation and network-request breadcrumbs are reduced to the path for the app's own pages and to the site address (domain only) for other addresses, so your Confluence site address can appear in a report. Designed to exclude model content and page titles (client-side, best-effort scrubbing); no names or email addresses. Technical identifiers such as page, space or model IDs may appear in diagnostic messages. A Confluence site administrator can disable this analytics egress via Atlassian's admin data-egress controls; when disabled, no diagnostic data is sent to Sentry. |
EU (*.ingest.de.sentry.io) |
Ingest and storage in the EU region. Sentry is a US-based processor, so limited diagnostic data may be processed in the United States; any such transfer relies on the EU-U.S. Data Privacy Framework, with the European Commission's Standard Contractual Clauses (Module 2, controller-to-processor) as a fallback. |
| Amazon Web Services EMEA SARL (AWS) | Help/documentation page hosting, support-communication handling (support@arkidor.io), and the product feedback board. Not part of the app runtime. | Help-page access logs (IP, user-agent, requested path, timestamp; no cookies; 90-day retention); support-email content and sender address; feedback-post content; feedback-board account details (name, email) where you create an account. No in-tenant model content. | EU (eu-west-1, Ireland) | Hosted in the EU (eu-west-1, Ireland), contracted with AWS EMEA SARL. Any access or transfer outside the EEA by AWS is covered by the AWS Data Processing Addendum, which incorporates the Standard Contractual Clauses. |
The Confluence app itself runs on Atlassian's Forge platform and does not route your model data through AWS. Personal data reaches AWS only when you choose to contact support, create a feedback-board account, or post feedback, or as standard access logs when your browser loads our help pages.
Administrator egress opt-out
Arkidor for Confluence participates in Atlassian's Runs on Atlassian program and declares its Sentry error-monitoring egress under the analytics category. A Confluence site administrator can disable the app's analytics / error-monitoring egress to Sentry at any time using Atlassian's admin data-egress controls. When this egress is disabled, no diagnostic data is sent to Sentry — the Sentry sub-processing does not occur for that site.
International transfers
Error telemetry is directed to Sentry's EU region, and all AWS infrastructure is in the EU (eu-west-1, Ireland). Your model content resides in your Confluence tenant according to Atlassian's data-residency configuration. Where any transfer outside the EEA occurs through a sub-processor, it relies on the transfer mechanism shown for that sub-processor in the table above.
Change notification
We will update this list and record a new effective date before engaging a new sub-processor, or materially changing the role of an existing one, and we make the current version available at this page and via the Marketplace listing. Customers may object on reasonable data-protection grounds as set out in our Data Processing Agreement.
Contact
Knaap · Itäinentie 50 · 06100 Porvoo · Finland · support@arkidor.io