SpaceGuard runs on Atlassian Forge inside the customer’s Confluence Cloud site. There are no remotes, no web triggers, and no egress to Huike/Codeland-operated hosts. Atlassian hosts functions, UI, and storage.
Please include: app name (SpaceGuard), site hostname only (no tokens), approximate time (with timezone), and steps to reproduce. Do not include customer content beyond what is needed to reproduce.
We aim to acknowledge reports within 2 business days (Asia/Shanghai business calendar) and keep reporters informed of status.
Incident management & response
We monitor Marketplace / Forge operational signals and customer reports for security-impacting issues.
If a confirmed security incident affects SpaceGuard customers, we will assess impact, contain, remediate, and notify affected admins through appropriate Marketplace/support channels with known facts (no speculation).
Security practices & Forge data protection
Data stored in Forge KVS per installation: space keys, rule flags, and a short run log (space/page/parent ids and result codes). No page titles, bodies, display names, group names, or email addresses in the run log.
CSV audit output is returned to the admin UI in the function response and is not written to Forge storage, emailed, or sent off Atlassian.
Auth: admin UI and bulk actions run as the acting user where applicable; create/move inheritance uses impersonation only as required to read/write Confluence restrictions.
No third-party sub-processors beyond Atlassian for this app’s runtime.
Policies and Marketplace listings for this app are published by Wuhan Huike Tianxia Technology Co., Ltd. / hktx.cn. Historical Codeland branding in older drafts does not change the Marketplace vendor of record (1213659).
Security Policy page for Marketplace App Review. Last updated 2026-11-06 (security contact: [email protected]).