Hooq Trust Center

Contact: hello@limbuslab.com.

Documents

• Architecture

  Hooq Architecture Diagram

  Data-flow and network diagram: where Hooq runs, what crosses between sites and how.

• Controls

  Encryption at Rest

  Where Hooq stores data and what the Atlassian platform provides.

• Controls

  Data Logging and Retention

  What is logged, who reads logs, and how long entries are kept.

• Subprocessors

  Subprocessors and Third-Party Integrations

  Atlassian is Hooq’s only subprocessor. Outbound domains and dependencies.

• Data handling

  Data Retention and Deletion

  What Hooq keeps, for how long, and how to delete it.

• Reliability

  Incident Response Plan

  How Hooq detects, classifies, communicates, resolves and reviews incidents.

• Security

  Security and Incident Response

  Security contact, vulnerability disclosure, fix targets and responsibilities.

• Accessibility

  Accessibility (VPAT)

  Accessibility conformance report (VPAT 2.5, WCAG): what is supported, what is partly supported and what is not yet evaluated.

• AI

  AI Usage Policy

  Hooq uses no AI or machine-learning model at runtime.

• Privacy

  Privacy Policy

  How Hooq processes data inside Jira Cloud.

Controls summary

• Runs on Atlassian Forge, with no Hooq-operated servers or databases.
• Data is stored only in Forge hosted storage, encrypted on disk by Atlassian; for data residency Hooq relies on the Forge platform, as described in Atlassian’s documentation.
• Signed, time-limited, replay-protected messages between paired sites.
• Least-privilege Jira scopes, listed in the Marketplace listing.
• Logging practices and retention as documented in Data Logging and Retention.
• A public status page.

Security contact and disclosure

Report suspected vulnerabilities to hello@limbuslab.com. We acknowledge a report within 3 business days. See Security and Incident Response for the disclosure policy and fix targets:

Subprocessors

Details in Subprocessors and Third-Party Integrations.

Request more information

To request security documentation or to ask a question about this page, email hello@limbuslab.com from a company address with the subject “Hooq trust request”. We reply within 3 business days.

More

• Hooq overview
• Privacy Policy
• Accessibility report (VPAT)
• Hooq help centre
• Status
• Contact
• Hooq on the Atlassian Marketplace (opens in a new tab)

We update this page when our practices change.