Skip to main content
Trust Center

Trust & Security

NGPILOT apps are built on the Atlassian platform with enterprise-grade security, privacy, and compliance — so your team can work with confidence.

Forge

Built on Atlassian Forge

Every NGPILOT app is built on Atlassian Forge, Atlassian's official cloud development platform. Forge provides automatic scaling, built-in encryption, and rigorous security controls — so every app inherits the same infrastructure trusted by thousands of enterprises on the Atlassian Cloud.

Automatic Scaling

Forge apps scale seamlessly with your team — no server provisioning, no capacity planning, no cold starts.

Built-in Encryption

All data is encrypted at rest and in transit by the Forge platform. Apps never manage their own encryption — it's handled automatically.

Atlassian Security Controls

Forge apps inherit Atlassian's IAM, MFA, and audit logging — no separate security infrastructure needed.

Runs in Atlassian Cloud

Runs in Atlassian Cloud

NGPILOT apps run entirely inside the Atlassian Cloud environment. Code executes on Atlassian infrastructure, data is stored in Atlassian's managed storage, and no data ever leaves your Atlassian instance. There are no external servers, third-party databases, or analytics endpoints — your information stays where it belongs.

No External Servers

App code runs via Forge compute, not on external VPS or cloud providers. Zero data egress to third parties.

Atlassian Storage

All app data uses Atlassian Forge Storage — the same managed storage that powers Jira and Confluence.

No Tracking

We do not collect analytics, usage telemetry, or crash reports. No cookies, no pixels, no tracking scripts.

Architecture

Security Architecture

Our security practices follow industry standards and are built on the foundation provided by the Atlassian platform.

Encryption

All data is encrypted at rest using AES-256 and in transit using TLS 1.2+. Encryption keys are managed by Atlassian Cloud infrastructure.

Access Control

MFA enforcement, least-privilege IAM roles, and automated credential rotation. Access is restricted to authorized personnel only.

Vulnerability Management

Continuous dependency scanning, OWASP Top 10 compliance, peer-reviewed code, and a responsible disclosure program with SLA-driven response times.

Certifications

Compliance & Certifications

We align with global standards and Atlassian's own security framework to meet enterprise requirements.

GDPRCompliant

All apps process data in accordance with GDPR requirements. Data is stored and processed exclusively within the Atlassian Cloud, which maintains GDPR compliance.

Cloud FortifiedWorking toward

We are actively working toward Atlassian Cloud Fortified status, aligning with Atlassian security best practices and framework requirements.

Data ResidencyCompliant

All data resides within the Atlassian Cloud infrastructure. No customer data is stored on external servers or third-party data centers.

Data

Privacy & Data Handling

NGPILOT apps are designed with privacy first. Here is a summary of how we handle your data.

What we store

App-specific configurations (e.g., template data, macro settings) stored in Atlassian Forge Storage. No personal data, browsing history, or content analysis.

Where it's stored

Exclusively within the Atlassian Cloud. No data is replicated to external servers, clouds, or data centers.

How long

Data persists as long as the app is installed and the data is in use. When uninstalled, Atlassian handles data retention per their Data Protection terms.

Third parties

None. We do not share, sell, or transmit any data to third parties. Analytics, advertising, and tracking are absent by design.