Security

Effective 27/10/2026.

Runs on Atlassian

Mermaid Studio is built on Atlassian Forge and is designed to be eligible for the Runs on Atlassian programme. It runs inside Atlassian's infrastructure and inherits its security controls.

No external data egress

The app does not send data to any outside service, and it does not store data of its own. Diagrams are kept in your Confluence page.

Permissions and why we ask for them

Permission	Purpose
`read:page:confluence`	Find Mermaid code blocks on a page so they can be converted.
`write:page:confluence`	Save the converted diagrams as a new page version when you confirm.
`read:attachment:confluence`	Read a .mmd file you choose as a diagram source, and find the diagram image used for export.
`write:attachment:confluence`	Save the diagram image used so diagrams appear in PDF and Word exports.

Safe rendering

Diagram text is drawn in strict mode, which blocks scripts and unsafe content in diagrams.

Report a vulnerability

Email support@wattlebrooks.com with the details. We will acknowledge your report within 2 business days.