Last updated: 6 July 2026
Canopy Access Review ("the App") is a Jira Cloud app developed and distributed by SR Consulting, a French sole proprietorship (auto-entrepreneur), via the Atlassian Marketplace. Full company details are in our Legal Notice. This policy explains how the App handles data.
Canopy Access Review is built on Atlassian Forge and is egress-free ("Runs on Atlassian"): it makes no external network calls and transmits no data outside the Atlassian cloud. All processing happens inside your own Atlassian environment. SR Consulting operates no servers that receive, store, or process your Jira data, and cannot access it.
To generate access-review reports, the App reads (read-only) from your Jira site: permission schemes and their grants, project roles and their members, group memberships, user account metadata (display name, account ID, account type, active/inactive status), and project metadata. It holds only the minimum read-only scopes listed on our Marketplace listing, can only read what the installing administrator is already permitted to see, and never modifies your Jira data.
Report snapshots created by the App are stored using Atlassian Forge storage (KVS), which resides within Atlassian's cloud and follows your Atlassian data-residency settings — not on any SR Consulting system. Snapshots persist until you delete them in the App or uninstall the App, after which Forge removes the App's stored data.
Because the App is egress-free, the only personal data we receive is the licensing and technical-contact information provided by the Atlassian Marketplace when you install, evaluate, or purchase the App. We use it solely to administer licenses, provide support, and meet legal and accounting obligations. If you contact us for support, we also process the details you choose to send us, solely to answer your request.
We do not sell or rent your data. The App uses no third-party analytics, tracking, advertising, or sub-processors for app data. Atlassian operates the platform the App runs on and is the Marketplace operator; see Atlassian's own Privacy Policy for its processing.
As an EU/French business we comply with the GDPR. You may request access to, correction of, or deletion of the personal data we hold (the Marketplace licensing/contact data and any support correspondence) via our support page. You can remove all App-processed data at any time by uninstalling the App.
SR Consulting — see our Legal Notice for registered details — reachable via our support page or contact@sr-consulting.fr.
We may update this policy; the "Last updated" date above always reflects the current version.