| Table of Contents |
|---|
Are Cards & Panels affected by the remote code execution (RCE) vulnerability of Log4j?
No, Caelor customers are not vulnerable, and no action is required. This vulnerability has been mitigated for all Caelor cloud products previously using vulnerable versions of Log4j.
Security is a very important to Caelor. Therefore Caelor complies with the highest security standards. That's why Cards & Panels is Cloud Fortified Certified. This is Atlassian's highest standard for cloud apps. More Information about Cloud Fortified can be found here.
...
What sort of data is collected, and what happens with that data?
Cards & Panels is storing Content Viz stores the installation information that Atlassian is being provided by Atlassianproviding. This data is needed to identify a client but does not indicate or expose any user data. Additionally, we are tracking usage information of our product (e.g., which card macro types are being used, which layout options or colors are set, which elements are configured in panels etc.). However, we are not collecting any contextual information around our macros: we don’t know which images you are using in cards, which title or text you enter in cardsmacros, the name of your Confluence pages, their authors/editors, or any content on them. At no point do we collect any personally identifiable information.
Where is the collected data being stored?
The data is saved on Googles data center located in Frankfurt am Main, GermanyWe are using the Google Cloud Platform to maintain our Connect applications. Data of all used services are located in regions or regions within the European Union (Belgium, Netherlands, Zurich, Frankfurt, Finland, or Warsaw). Therefore EU jurisdiction applies. For more information, see: https://cloud.google.com/compute/docs/regions-zones. Our Forge apps rely on Atlassian's data residency features. We do not store any sensitive customer information like this.
Which data security protocols in relation to data breaches are in place?
We do not collect any sensitive and/or personally identifiable information. All captured information is stored on highly secure Google servers located in Europe. In an unlikely event of a data breach, we will be informed by Google and pass this information on to our clients.
Cards & Panels used to be free. Why did you switch to a paid model?
Since we launched Cards and Panels, we have not charged a price for our unique formatting app. We have implemented many more features to our apps that where requested by you, our users. A side effect of this is an increased demand for support and development teams to keep things running smoothly in more complex environments. Now it is time to adjust the pricing to reflect the amount of development and support that has gone into all of the new and improved features. On 1st of October, 2021 prices will go up to the levels outlined in the Atlassian Marketplace.
Which new features were added in the October 2021 release?
On the occasion of the current updates, further particularly helpful functions were integrated into the app, which make content appear even more professional and structured. During the development and implementation of the new functions, the focus was on improving the factors of stability, performance and functionality for the user.
The following functions were integrated within the new update:
Panels
Panels can now be extended with titles and icons
Individual colours can also be selected in panels
Title and content can be aligned differently and there is a choice of defined frames
Support of images, tables and many macros within the panel (before: only text was displayed)
Cards
...
By default, three cards are now displayed in a three-column layout
...
Content Cards and Basic Cards can be arranged in different column layouts (1,2,3,4)
...
The order of the cards can now be easily adjusted by drag'n'drop
...
Confluence can be scanned for linked cards. In addition, recently viewed pages are automatically displayed to the user as suggestions
...
In addition to manually adding people, areas or pages, you can apply dynamic filters to the cards
...
Is Content Viz affected by the remote code execution (RCE) vulnerability of Log4j?
No, Caelor customers are not vulnerable, and no action is required. This vulnerability has been mitigated for all Caelor cloud products previously using vulnerable versions of Log4j.
Security is very important to Caelor. Therefore Caelor complies with the highest security standards. That's why MarcoSuite is Cloud Fortified Certified. This is Atlassian's highest standard for cloud apps. More Information about Cloud Fortified can be found here.