Inactive Users Manager – Trust Center
Transparency about data handling, Forge security, data residency, and Guard/SCIM limitations.
This page provides transparency about how Inactive Users Manager handles data, security, and compliance within Atlassian Cloud.
Privacy Overview
Inactive Users Manager is an Atlassian Forge application designed to identify inactive users based on their last activity in Jira and group membership. The app runs entirely within Atlassian Cloud and does not use external infrastructure.
Data Access
- Jira users (accountId, displayName, and email when available)
- Group membership information
- User activity metadata (last active / activity signals)
- Jira issue data only when required for activity evaluation
Access is limited to what is necessary to generate inactivity reports.
Data Storage
- Job execution metadata (temporary)
- Generated report chunks (temporary)
- Admin configuration (ORG ID and Admin API Key, encrypted via Forge storage)
All data is stored using Atlassian Forge Storage, scoped to each customer instance.
Data Sharing
- Does not share data with third parties
- Does not sell data
- Does not send data outside Atlassian
All processing occurs within Atlassian infrastructure.
Security Statement
Inactive Users Manager is built on Atlassian Forge and inherits its security model.
- Runs entirely within Atlassian Cloud
- No external servers required
- Admin API usage only when explicitly configured by the customer
- Encrypted storage via Forge
- Principle of least privilege
- All operations respect the Jira permission model
Important Limitation (Atlassian Guard / SCIM)
For environments using Atlassian Guard (SCIM / AD sync), some groups cannot be modified via API. User removal from these groups must be done in the identity provider. The app detects and safely ignores these scenarios.
Data Residency
- Data remains within Atlassian-controlled infrastructure
- Respects the customer configured region
- No external data transfer
Compliance
- GDPR
- LGPD
- Data minimization
- No external storage
- Permission-based access
- Automatic cleanup of stored data
Support & Contact
For any questions related to privacy, security, or compliance, please contact
Updates
This Trust Center may be updated as the app evolves.