Planning TableSecurity
Effective 03/11/2026. This page is for security reviewers evaluating Planning Table - Planning Poker for Jira, provided by Wattlebrooks Apps.
Runs on Atlassian
Planning Table is built on Atlassian Forge and runs entirely on Atlassian's platform. It is eligible for the Runs on Atlassian program: the app has no outside connections, and its data is stored only in Atlassian-hosted app storage on your own site, encrypted at rest by Atlassian.
Permissions
| Permission | Why |
|---|---|
read:jira-work | Find and read the work items you pick for a session, their context, and reference work items at each scale value. |
write:jira-work | Save agreed estimates to the number field you choose, only when the facilitator saves, and as the facilitator. |
read:jira-user | Show participants' display names in the room. |
storage:app | Keep sessions, votes, participants, bucket placements and finals on your site. |
That is the complete list. No admin permissions and no outside network access are requested.
Access control
- All Jira access uses Atlassian's own sign-in. The app never asks for API tokens or passwords and stores no credentials or secrets.
- Estimates are saved as the facilitator, so nobody can save to a work item they couldn't edit in Jira.
- Vote values are never shown to anyone before the reveal (Interactive) or before voting closes (Async), including the facilitator in Async mode.
- Facilitator-only actions (reveal, re-vote, finals, save, close, delete) are enforced by the app, not just hidden on screen.
Compliance
Planning Table inherits the security and compliance posture of Atlassian Forge, which holds SOC 2 Type II and ISO 27001/27017/27018 certifications. The app itself has no separate certification and does not handle payment data; billing is handled by Atlassian. The app is reviewed by Atlassian as part of Marketplace approval.
Changes
Each release is described in the What's new section of the Marketplace listing.
Reporting a problem
If you think you have found a security issue, email support@wattlebrooks.com or raise a request. We aim to reply within 2 business days.