Atlassian Forge app · Jira and Confluence

The personal data is already in your tickets.

Velum Privacy scans Jira and Confluence for personal data that is already sitting there, masks it in place without breaking the page it was on, and leaves an administrator a record of every change. It runs on Forge, inside Atlassian’s own runtime.

Install

On the Atlassian Marketplace

Jira required, Confluence optionalLive on the Marketplace since 24 July 2026

Scan at rest, scan on write, mask in place.

At rest

A sweep across the whole instance.

Driven by a daily scheduled trigger and queued through an async consumer, so a large site does not walk into a function timeout. A second scan cannot stack on a running one.

On write

Every new and edited issue and page.

Triggers on Jira issue created and updated, and on Confluence page created and updated. Comments and attachments are included, subject to policy. A fresh install queues its first scan straight away, so a new site is not looking at an empty dashboard.

In place

Masking that does not break the page.

It walks the live ADF or storage document and rewrites text nodes only, so headings, lists, tables, panels, links and macros survive intact. The placeholder is ⟦TYPE_N⟧ and it is reversible.

Three modes

Off, Monitor, Protect. Monitor is the default.

A tool that starts rewriting your instance before you have looked at what it found is the wrong default, so it does not do that.

GDPR Article 17

Find a subject, see every location, remediate.

A lookup by name or email lists everywhere that person appears, with a generated PDF report for the file. It is a lookup and remediate flow, not an automatic hard delete.

Record

An audit log, labels, and a policy you control.

Every scan and action is logged. High-severity findings get native labels on the issues and pages that carry them. Auto-masking is a policy you turn on when you are ready.

0: It runs on Forge, inside your own tenant. There is no Forge Remote and no third-party AI service in the request path.
Monitor: A tool that starts rewriting your instance before you have seen what it found is the wrong default, so it does not do that.
In place: It rewrites text nodes only, so headings, lists, tables, panels, links and macros survive, and the placeholder is reversible.

The detection tiers and every place your content can go

Request a demo

See it work on your own data.

Tell us what you work with and we will walk you through it on a call, on your own files. Nothing leaves your machine while we do.

Your address is used to reply to you, and for nothing else.