Trust center
Hooq Trust Center
Last updated:
Contact: [email protected].
Documents
Architecture
Hooq Architecture Diagram
Data-flow and network diagram: where Hooq runs, what crosses between sites and how.
Controls
Encryption at Rest
Where Hooq stores data and what the Atlassian platform provides.
Controls
Data Logging and Retention
What is logged, who reads logs, and how long entries are kept.
Subprocessors
Subprocessors and Third-Party Integrations
Atlassian is Hooq’s only subprocessor. Outbound domains and dependencies.
Data handling
Data Retention and Deletion
What Hooq keeps, for how long, and how to delete it.
Reliability
Incident Response Plan
How Hooq detects, classifies, communicates, resolves and reviews incidents.
Security
Security and Incident Response
Security contact, vulnerability disclosure, fix targets and responsibilities.
Accessibility
Accessibility (VPAT)
Accessibility conformance report (VPAT 2.5, WCAG): what is supported, what is partly supported and what is not yet evaluated.
AI
AI Usage Policy
Hooq uses no AI or machine-learning model at runtime.
Privacy
Privacy Policy
How Hooq processes data inside Jira Cloud.
Controls summary
- Runs on Atlassian Forge, with no Hooq-operated servers or databases.
- Data is stored only in Forge hosted storage, encrypted on disk by Atlassian; data residency follows the Jira site.
- Signed, time-limited, replay-protected messages between paired sites.
- Least-privilege Jira scopes, listed in the Marketplace listing.
- Logging practices and retention as documented in Data Logging and Retention.
- A public status page.
Security contact and disclosure
Report suspected vulnerabilities to [email protected]. We acknowledge a report within 3 business days. See Security and Incident Response for the disclosure policy and fix targets:
| Severity | Fix or mitigation target |
|---|---|
| Critical | 7 days |
| High | 30 days |
| Medium | 90 days |
| Low | Best effort |
Subprocessors
| Subprocessor | Role |
|---|---|
| Atlassian | Forge hosting, storage and logs; Jira Cloud. Hooq’s only subprocessor. |
Details in Subprocessors and Third-Party Integrations.
Request more information
To request security documentation or to ask a question about this page, email [email protected] from a company address with the subject “Hooq trust request”. We reply within 3 business days.
More
- Hooq overview
- Privacy Policy
- Accessibility report (VPAT)
- Hooq help centre
- Status
- Contact
- Hooq on the Atlassian Marketplace (opens in a new tab)
We update this page when our practices change.