Worklogs now Runs on Atlassian: Migrating to Forge

[#1]

Is data security on your mind? It definitely is on ours. That’s why we ensured to get the Runs on Atlassian badge for our Worklogs - Time Tracking, Time Reports, Timesheets for Jira. What it means is that our app runs entirely on Atlassian-hosted infrastructure, aligns with the host Atlassian app’s data residency, and gives you full control over data egress, including the ability to block it completely. That way, all your data is safe and fully protected, and you decide where it goes.

Forge: The (near) future of Atlassian apps

Earlier this year, Atlassian announced the end of support for Connect - a development framework used by vendors to build apps. Eventually, Connect is to be replaced by Forge - a much more standardized, security-focused platform.

Why Forge wins for customers

Aspect	Atlassian Connect	Atlassian Forge
Hosting	Apps are hosted externally by the developer (e.g., AWS, Azure).	Apps are hosted on Atlassian’s own infrastructure.
Security	Security depends on how the developer configures and maintains their hosting environment.	Security is managed by Atlassian - apps run in a sandboxed, Atlassian-controlled environment.
Data residency	Data residency is determined by the developer’s hosting location and may differ from the customer’s Jira/Confluence region.	Data residency matches the host Atlassian product, ensuring compliance and consistency.
Performance & Reliability	Relies on the developer’s servers and APIs; performance may vary.	Runs directly within Atlassian Cloud, benefiting from the same reliability and scalability as Atlassian products.
Data egress	App data can be sent anywhere the developer’s systems are hosted.	Customers control data egress (e.g., analytics, logs) and can block it entirely.
Development model	Traditional web app model - more flexible but requires managing infrastructure.	Serverless model - faster to deploy, easier to maintain, and automatically scales.
Access & Permissions	Uses OAuth and JWT for communication between the app and Atlassian.	Uses the Forge platform’s fine-grained permission model with automatic consent screens.

Atlassian’s shift towards security

Data is one of the most valuable resources in today’s digital world, and so it’s crucial to build platforms and products that prioritize keeping it safe. Atlassian significantly intensified their focus on security in recent years, particularly since 2024. Forge migration is just one of many security-focused initiatives designed to meet modern customers' needs. Other include:

• Atlassian Guard: A comprehensive security suite that offers centralized identity and access management, data loss prevention, and threat detection. Guard enables organizations to enforce security policies, detect suspicious activities, and respond swiftly to potential threats, ensuring robust protection across Atlassian cloud products.
  
  
• Atlassian Government Cloud: A dedicated cloud environment designed to meet the stringent security and compliance requirements of U.S. government agencies and their contractors. It has achieved FedRAMP Moderate authorization, providing enhanced controls, continuous monitoring, and a separate perimeter from Atlassian's commercial cloud.

Learn more on Atlassian’s security practices →

Runs on Atlassian: An indicator of future-focused technology

We’re proud to have earned the Runs on Atlassian badge. It shows our commitment to high quality solutions centered around the customer's best interest.

Our users’ security has an utmost importance to us, and so we will do anything we can to deserve your trust. Migrating to Forge is one of the steps we’re taking to get there - it provides a stronger, safer, and more reliable foundation for our apps. Here’s why:

• Built for security: Forge apps run entirely within Atlassian’s infrastructure, eliminating risks tied to external hosting.
  
  
• Aligned with data residency: Your app data stays in the same region as your Jira instance, ensuring compliance and consistency.
  
  
• Full control over data flow: You can manage or completely block data egress, giving you total control over where your information goes.
  
  
• Future-ready platform: With Atlassian phasing out Connect, Forge is the supported, long-term framework that ensures compatibility and stability.
  
  
• Simplified maintenance and scalability: Forge’s serverless model allows faster updates, automatic scaling, and less downtime.
  
  
• Transparency and trust: By adopting Forge, we align with Atlassian’s highest security and privacy standards - so you can focus on your work with peace of mind.

Seamless migration

For the existing users, migrating to Forge is simple - all it requires is for Jira Admin to accept the major update. They can do it by going to admin.atlassian.com → Apps → Sites → Choose your site → Connected apps → Worklogs (view app details) → Update.

Once confirmed, the app will upgrade automatically, and no data, configuration, or saved reports will be lost. You’ll still be able to find them in the Saved reports section of the app.

New customers can enjoy all the benefits of a Forge-based app right from the start. Try Worklogs now →