Security assessment
Oktul Code Studio is listed in the Cloud Security Alliance STAR Registry at Level 1.
Read the assessment on the STAR Registry
What that is, and what it is not
Level 1 is a self-assessment. We completed the Consensus Assessments Initiative Questionnaire Lite v4.1.0 for this application, all 138 questions across the 17 Cloud Controls Matrix domains, and published it for anyone to read. Each answer carries the shared-responsibility owner: whether the control is ours, Atlassian’s as the platform, or yours as the customer. Where the answer is no, it says so and why.
This assessment answers for what Code Studio does that a field or a macro does not: it runs scripts your administrators publish, and a script or a connection reaches a host outside Atlassian only after a site administrator approves that host in Atlassian’s own dialog. A space synced to a Git repository sends its scripts to that host, with the credential your administrator connected, and Atlassian’s gateway carries the calls a script makes to another Atlassian site. The data, location, retention and encryption answers say where each of those goes and who holds it, and the privacy notice names every recipient.
The shorter version
If you want the same ground in fewer words, privacy and data handling covers what this application stores and what leaves your Atlassian tenancy, security covers its controls, and the trust page covers the company: our support commitments, the response targets behind them, and Oktul’s own STAR entry.
That company entry is a separate assessment from this one. It is scoped to Oktul and carries no application detail; this page’s entry is scoped to Code Studio and adds it. Neither stands in for the other, so a reviewer assessing this application should read this one.
A problem or a question? Write to support@oktul.com or open a request in the Help Center. Both open a request with a reference and an SLA.