# Security assessment

> SignPlus's completed CSA CAIQ Lite assessment, published in the Cloud Security Alliance STAR Registry.
>
> Documentation for Oktul SignPlus for Confluence, for Confluence Cloud, by Oktul: https://oktul.com/docs/plugins/signplus/caiq/

SignPlus is listed in the **Cloud Security Alliance STAR Registry** at Level 1.

[Read the assessment on the STAR Registry](https://cloudsecurityalliance.org/star/registry/oktul-ou/services/oktul-signplus-for-confluence)

## What that is, and what it is not

Level 1 is a **self-assessment**. We completed the Consensus Assessments Initiative
Questionnaire Lite v4.1.0 for this application, all 138 questions across the 17 Cloud
Controls Matrix domains, and published it for anyone to read. Each answer carries the
shared-responsibility owner: whether the control is ours, Atlassian's as the platform, or
yours as the customer. Where the answer is no, it says so and why.

This assessment answers for what SignPlus does that a Confluence-only app does not: it sends
the document and each signer's name and email address to Dokobit, a qualified trust service
provider, to create the signature. The data, location, retention and encryption answers say
where that data goes and who holds it, and the [privacy notice](../privacy/) names every
recipient.

## The shorter version

If you want the same ground in fewer words, [privacy and data
handling](../privacy/) covers what this application stores and what leaves your Atlassian
tenancy, and the [trust page](https://oktul.com/trust/) covers the company: our
support commitments, the response targets behind them, and Oktul's own STAR entry.

That company entry is a **separate assessment from this one**. It is scoped to Oktul and carries
no application detail; this page's entry is scoped to SignPlus and adds it. Neither
stands in for the other, so a reviewer assessing this application should read this one.

---

A problem or a question? Write to [support@oktul.com](mailto:support@oktul.com) or open a request in the [Help Center](https://oktul.atlassian.net/servicedesk/customer/portals). Both open a request with a reference and an SLA.