Security Statement for Sketch2Diagram

Last Updated: August 21, 2026
Vendor: Appgenesis

At Appgenesis, we take the security of your data seriously. Sketch2Diagram is built natively on the Atlassian Forge platform, which means it inherits Atlassian's enterprise-grade security, infrastructure, and compliance controls.

1. Data Storage and Handling

No External Databases: We do not store any customer data, sketches, diagrams, or Personally Identifiable Information (PII) on custom external servers or third-party databases.
Atlassian Forge Storage: All application data is stored natively inside your Confluence instance utilizing the Atlassian Forge Key-Value Store (KVS). This means your data never leaves the Atlassian ecosystem at rest.

2. Encryption

Data in Transit: All communications between the user's browser, Atlassian's servers, and our app are encrypted using TLS 1.2 or higher.
Data at Rest: Data stored via Forge Storage is encrypted at rest by Atlassian in accordance with Atlassian's strict cloud security policies.

3. External API Usage (Data Egress)

To provide our core AI functionality, Sketch2Diagram securely transmits image data to the Google Gemini Enterprise API.

Ephemeral Processing: Data sent to Gemini is used strictly for real-time diagram generation and is not stored or persisted on Google's servers.
No AI Training: Per Google's enterprise API agreements, your sketch data and diagram outputs are never used to train Google's base AI models.

4. Vulnerability Management

Automated Scanning: We utilize Software Composition Analysis (SCA) tools to monitor our dependencies for known vulnerabilities prior to every release.
Incident Response: We adhere to the Atlassian Marketplace Security Bug Fix Policy. In the event of a critical vulnerability, patches will be developed and deployed within the SLA timeframes mandated by Atlassian.

5. Contact Us

If you believe you have found a security vulnerability in Sketch2Diagram, please contact our security team immediately at:
Email: admin@appgenesis.uk