Scriptline / Docs / Security and data

Security and data

Last updated 03/11/2026

• Built on Atlassian Forge, zero egress. Everything runs on Atlassian's platform. Wattlebrooks Apps operates no servers for Scriptline, and the app makes no external network calls: no analytics, no AI, no third parties.
• Your scripts stay in Atlassian. Scripts, versions, run history and job records are stored on your own Jira site, encrypted at rest by Atlassian.
• Admin-only. The app is a Jira admin page and every action independently checks the caller holds Administer Jira.
• A limited script surface. Scripts receive only jira, console and context. They cannot import packages or reach anything beyond the Jira API.
• Scopes: read:jira-user, read:jira-work, write:jira-work, storage:app. Scripts normally run as the app; the Console's "Run as: me" runs a single script with the invoking admin's own permissions.

Review what the app does

1. Open All hooks to see every saved hook and whether it is enabled.
2. Open Run history to see what each run read, wrote and returned.
3. Disable or delete any hook you no longer want. A disabled hook never runs.

Full policies: Privacy · Security.