# Security assessment

> Work Item Macro's completed CSA CAIQ Lite assessment, published in the Cloud Security Alliance STAR Registry.
>
> Documentation for Oktul Work Item Macro for Confluence, for Confluence Cloud, by Oktul: https://oktul.com/docs/plugins/work-item-macro/caiq/

Work Item Macro is listed in the **Cloud Security Alliance STAR Registry** at Level 1.

[Read the assessment](https://cloudsecurityalliance.org/star/registry/oktul-ou/services/oktul-work-item-macro-for-confluence)

## What the assessment covers

We completed the Consensus Assessments Initiative Questionnaire Lite v4.1.0 for this application,
all 138 questions across the 17 Cloud Controls Matrix domains, and published it for you or for your
security reviewer. Each answer carries the shared-responsibility owner: whether the control is ours,
Atlassian's as the platform, or yours as the customer. Where the answer is no, it says so and why.

The macro declares no external host and stores nothing but its configuration, in the page.
The answers say so where it matters: no egress, no sub-processor beyond Atlassian as host, no
copy of Jira data kept.

## The shorter version

If you want the same ground in fewer words, [privacy and data handling](../privacy/) covers what
this application stores and what leaves your Atlassian ecosystem. The [trust page](https://oktul.com/trust/) covers
the company: our support commitments, the response targets behind them, and Oktul's own STAR entry.

That company entry is a **separate assessment from this one**. It is scoped to Oktul and carries
no application detail; this page's entry is scoped to Work Item Macro and adds it. Neither
stands in for the other, so a reviewer assessing this application should read this one.

---

A problem or a question? Write to [support@oktul.com](mailto:support@oktul.com) or open a request in the [Help Center](https://oktul.atlassian.net/servicedesk/customer/portals).